opsi client agent installation fails due to ssl3 error [solved]

Benutzeravatar
SisterOfMercy
Beiträge: 1023
Registriert: 22 Jun 2012, 19:18

opsi client agent installation fails due to ssl3 error [solved]

Beitragvon SisterOfMercy » 22 Jun 2018, 18:23

Code: Alles auswählen

[6] [Jun 22 18:02:40:316]         If
[7] [Jun 22 18:02:40:316]           $INST_Authenticated$ = "false"   <<< result true
[7] [Jun 22 18:02:40:317]           $INST_userIsAdmin$ = "false"   <<< result true
[7] [Jun 22 18:02:40:317]           ($INST_userIsAdmin$ = "false")   <<< result true
[6] [Jun 22 18:02:40:317]           ($INST_Authenticated$ = "false") or ($INST_userIsAdmin$ = "false")   <<< result true
[6] [Jun 22 18:02:40:317]         Then
[5] [Jun 22 18:02:40:317]           comment: was not authenticated or not admin-> retry scripted login by user/password from config.ini
[5] [Jun 22 18:02:40:317]           comment: Try to open new network connection
[6] [Jun 22 18:02:40:318]           Set  $INST_Authenticated$ = opsiservice_authenticated($INST_Service_User$,$Inst_Service_Password$,$OCD_config_service.url$,"false")
[8] [Jun 22 18:02:40:318]           We are coming from function with index: 5 (-1 = base)
[8] [Jun 22 18:02:40:318]           We enter the defined function: opsiservice_authenticated with 23 lines. inDefFuncLevel: 3
[8] [Jun 22 18:02:40:318]           Paramnr: 0 is : $INST_Service_User$
[8] [Jun 22 18:02:40:318]           Paramnr: 0 is the string: adminuser
[8] [Jun 22 18:02:40:318]           Paramnr: 1 is : $Inst_Service_Password$
[8] [Jun 22 18:02:40:318]           Paramnr: 1 is the string: ***(confidential)***
[8] [Jun 22 18:02:40:318]           Paramnr: 2 is : $OCD_config_service.url$
[8] [Jun 22 18:02:40:319]           Paramnr: 2 is the string: <configserverurl>
[8] [Jun 22 18:02:40:319]           Paramnr: 3 is : "false"
[8] [Jun 22 18:02:40:319]           Paramnr: 3 is the string: false
[6] [Jun 22 18:02:40:319]           Marked error number 5
[6] [Jun 22 18:02:40:319]           If
[7] [Jun 22 18:02:40:320]             $interactive$ = "true"   <<< result false
[7] [Jun 22 18:02:40:320]             $url$ = ""   <<< result false
[7] [Jun 22 18:02:40:320]             not($url$ = "")   <<< result true
[6] [Jun 22 18:02:40:320]             ($interactive$ = "true") and not($url$ = "")   <<< result false
[6] [Jun 22 18:02:40:320]           Then
[6] [Jun 22 18:02:40:321]           Else
[6] [Jun 22 18:02:40:321]             If
[7] [Jun 22 18:02:40:321]               $user$ = ""   <<< result false
[7] [Jun 22 18:02:40:321]               $pass$ = ""   <<< result false
[7] [Jun 22 18:02:40:322]               $url$ = ""   <<< result false
[7] [Jun 22 18:02:40:322]               not($url$ = "")   <<< result true
[7] [Jun 22 18:02:40:322]               not($pass$ = "") and not($url$ = "")   <<< result true
[6] [Jun 22 18:02:40:322]               not($user$ = "") and not($pass$ = "") and not($url$ = "")   <<< result true
[6] [Jun 22 18:02:40:322]             Then
[5] [Jun 22 18:02:40:322]               comment: we try new credentials
[5] [Jun 22 18:02:40:323]               Execution of: opsiservicecall_check_authenticated /username $user$ /password $pass$ /serviceurl $url$
[5] [Jun 22 18:02:40:323]               
[6] [Jun 22 18:02:40:324]                    "method": "authenticated"
[6] [Jun 22 18:02:40:324]                 Working with ssl protocol: sslvSSLv23 - auto negotation
[8] [Jun 22 18:02:40:324]                 createSocket-BoundIp:
[8] [Jun 22 18:02:40:325]                 Using MimeType: application/json
[8] [Jun 22 18:02:40:325]                 HTTP Header:
[8] [Jun 22 18:02:40:325]                 Exception in retrieveJSONObject0: Unknown Protocol
[7] [Jun 22 18:02:40:325]                 Changing to MimeType: gzip-application/json-rpc
[8] [Jun 22 18:02:40:325]                 Using MimeType: gzip-application/json-rpc
[8] [Jun 22 18:02:40:325]                 Exception in retrieveJSONObject0: Unknown Protocol
[8] [Jun 22 18:02:40:325]                 JSON Call: {"method":"backend_info","params":[],"id":1} Time: 00:00:00:001
[8] [Jun 22 18:02:40:325]                 Exception in retrieveJSONObject:1: Stream read error
[3] [Jun 22 18:02:40:325]                 Error: retrieveJSONObject --- opsi service problem ----> unexpected Result from webservice in retrieveJSONObject, number of lines: 0-> retrieveJSONObject:1: Stream read error
[6] [Jun 22 18:02:40:325]                 Working with ssl protocol: sslvSSLv23 - auto negotation
[8] [Jun 22 18:02:40:325]                 createSocket-BoundIp:
[8] [Jun 22 18:02:40:325]                 Exception in getOpsiServerVersion
[5] [Jun 22 18:02:40:325]                 opsi Server Version :
[6] [Jun 22 18:02:40:325]                 Working with ssl protocol: sslvSSLv23 - auto negotation
[8] [Jun 22 18:02:40:325]                 createSocket-BoundIp:
[8] [Jun 22 18:02:40:325]                 Using MimeType: gzip-application/json-rpc
[8] [Jun 22 18:02:40:325]                 HTTP Header:
[8] [Jun 22 18:02:40:325]                 Exception in retrieveJSONObject0: Unknown Protocol
[7] [Jun 22 18:02:40:325]                 Changing to MimeType: application/json
[8] [Jun 22 18:02:40:325]                 Using MimeType: application/json
[8] [Jun 22 18:02:40:326]                 Exception in retrieveJSONObject0: Unknown Protocol
[8] [Jun 22 18:02:40:326]                 JSON Call: {"method":"backend_info","params":[],"id":1} Time: 00:00:00:001
[8] [Jun 22 18:02:40:326]                 Exception in retrieveJSONObject:1: Stream read error
[3] [Jun 22 18:02:40:326]                 Error: retrieveJSONObject --- opsi service problem ----> unexpected Result from webservice in retrieveJSONObject, number of lines: 0-> retrieveJSONObject:1: Stream read error
[3] [Jun 22 18:02:40:326]                 Exception in doOpsiServicecall: tscLogin: List index (0) out of bounds
[3] [Jun 22 18:02:40:326]                 Error: not connected to service
[3] [Jun 22 18:02:40:326]                 Error: no connection to service


I think it goes wrong here "Working with ssl protocol: sslvSSLv23 - auto negotation".
This is opsi-client-agent 4.1.0.0-8, also tried -12 from experimental. Does anybody have 4.1.0.0-4 to test?
Editing opsiconfd.conf on the opsi server and setting accepted cyphers didn't help.

This is a fresh install of win7-x64. Updating a different computer from 4.1.0.0-4 to 4.1.0.0-8 seemed to work fine.
Zuletzt geändert von SisterOfMercy am 03 Jul 2018, 14:45, insgesamt 1-mal geändert.
Bitte schreiben Sie Deutsch, when I'm responding in the German-speaking part of the forum!

Benutzeravatar
SisterOfMercy
Beiträge: 1023
Registriert: 22 Jun 2012, 19:18

Re: opsi client agent installation fails due to ssl3 error

Beitragvon SisterOfMercy » 26 Jun 2018, 18:11

viewtopic.php?f=10&t=10208

opsi-client-agent (4.1.0.0-6) stable; urgency=low

* opsi-deploy-client-agent: using SMB3 as max protocol
* upgrade to opsi-winst 4.12.0.18 (do 7.5.2018)

-- Mathias Radtke <m.radtke@uib.de> Fri, 04 May 2018 10:52:00 +0200

opsi-client-agent (4.1.0.0-5) stable; urgency=low

* setup412: fix in deffunc opsiservice_authenticated
* fix opsi-seploy-client-agent

-- Detlef Oertel <d.oertel@uib.de> Fri, 27 Apr 2018:15:00:00 +0200

opsi-client-agent (4.1.0.0-4) stable; urgency=low

* fix integration of opsiclientdguard
* upgrade to opsi-winst 4.12.0.17

-- Detlef Oertel <d.oertel@uib.de> Fri, 20 Apr 2018:15:00:00 +0200


Uhhhh, fix in deffunc opsiservice_authenticated? I would really like to know what was changed, but I can't find 4.1.0.0-4 anywhere! :(
Also, this does not seem to be on github or somewhere else?
Bitte schreiben Sie Deutsch, when I'm responding in the German-speaking part of the forum!

Benutzeravatar
d.oertel
uib-Team
Beiträge: 3276
Registriert: 04 Jun 2008, 14:27

Re: opsi client agent installation fails due to ssl3 error

Beitragvon d.oertel » 27 Jun 2018, 12:07

Hi Sister,

did you try
opsi-client-agent (4.1.0.0-11)
?

cheers

d.oertel
opsi support - uib gmbh

For productive opsi installations we recommend support contracts.
http://www.uib.de
http://www.opsi.org

Benutzeravatar
SisterOfMercy
Beiträge: 1023
Registriert: 22 Jun 2012, 19:18

Re: opsi client agent installation fails due to ssl3 error

Beitragvon SisterOfMercy » 27 Jun 2018, 14:19

d.oertel hat geschrieben:did you try
opsi-client-agent (4.1.0.0-11)


Yes, I did.
Bitte schreiben Sie Deutsch, when I'm responding in the German-speaking part of the forum!

Benutzeravatar
d.oertel
uib-Team
Beiträge: 3276
Registriert: 04 Jun 2008, 14:27

Re: opsi client agent installation fails due to ssl3 error

Beitragvon d.oertel » 27 Jun 2018, 16:18

Hi sister,

if I understood you, the problem is:
running a windows installation with a opsi netboot product,
the windows installation works but the initial opsi-client-agent installation hangs.
No problem is found on installing (updating) the opsi-client-agent on existing opsi clients.
Is this correct ?
If yes:
----------
Please make sure to use opsi-winst 4.12.0.22
https://download.uib.de/opsi4.0/experimental/opsi-v407/products/localboot/opsi-winst_4.12.0.22-1.opsi
Just reproduce your problem with this opsi-winst version and send the complete zipped opsi-client-agent.log to
d.oertel(at)uib.de.
----------
If no:
----------
what did i missed ?
----------

cheers

detlef
opsi support - uib gmbh

For productive opsi installations we recommend support contracts.
http://www.uib.de
http://www.opsi.org

Benutzeravatar
SisterOfMercy
Beiträge: 1023
Registriert: 22 Jun 2012, 19:18

Re: opsi client agent installation fails due to ssl3 error

Beitragvon SisterOfMercy » 27 Jun 2018, 16:30

d.oertel hat geschrieben:running a windows installation with a opsi netboot product,
the windows installation works but the initial opsi-client-agent installation hangs.
No problem is found on installing (updating) the opsi-client-agent on existing opsi clients.
Is this correct ?


Yes, this is correct.

How am I going to use that winst version? The opsi-client-agent has its own winst version on board, does it not? Or should I just extract that package and place the files where the should go? \opsi-client-agent\files\opsi\opsi-winst\ I think it is.
Bitte schreiben Sie Deutsch, when I'm responding in the German-speaking part of the forum!

Benutzeravatar
d.oertel
uib-Team
Beiträge: 3276
Registriert: 04 Jun 2008, 14:27

Re: opsi client agent installation fails due to ssl3 error

Beitragvon d.oertel » 27 Jun 2018, 16:41

Hi,

yeah - you are right.
So in the first step - just send me the complete log you have.

I don't think that it has anything to do with ssl - but I have to look at the code.
The main thing that is new in opsi-client-agent 4.1.x.x is the use of defined functions in the installation of the 4.1 version.

Is this a opsi 4.0 or 4.1 server ?

cheers

detlef
opsi support - uib gmbh

For productive opsi installations we recommend support contracts.
http://www.uib.de
http://www.opsi.org

Benutzeravatar
SisterOfMercy
Beiträge: 1023
Registriert: 22 Jun 2012, 19:18

Re: opsi client agent installation fails due to ssl3 error

Beitragvon SisterOfMercy » 27 Jun 2018, 17:35

d.oertel hat geschrieben:Is this a opsi 4.0 or 4.1 server ?


4.1 CentOS 7

Code: Alles auswählen

opsi-configed.noarch                    4.0.7.6.34-2.2                 @opsi41
opsi-linux-bootimage.noarch             20180621-1.1                   installed
opsi-server.noarch                      4.1.1.4-10.2                   @opsi41
opsi-tftp-hpa-server.x86_64             5.2.8-47.1                     @opsi41
opsi-utils.noarch                       4.1.1.19-2.2                   @opsi41
opsiconfd.noarch                        4.1.1.10-7.2                   @opsi41
opsipxeconfd.noarch                     4.1.1.9-1.2                    @opsi41
python-Twisted.x86_64                   12.0.0-10.4                    @opsi4
python-ldaptor.x86_64                   0.0.43-16.7                    @opsi4
python-opsi.noarch                      4.1.1.29-1.2                   @opsi41
python-pam.x86_64                       0.5.0-4.5                      @opsi4
zsync.x86_64                            0.6.2-5.3                      @opsi4


I installed the bootimage by hand, just today, to test that virtualbox issue.

edit: You've got mail.
Bitte schreiben Sie Deutsch, when I'm responding in the German-speaking part of the forum!

Benutzeravatar
SisterOfMercy
Beiträge: 1023
Registriert: 22 Jun 2012, 19:18

Re: opsi client agent installation fails due to ssl3 error

Beitragvon SisterOfMercy » 28 Jun 2018, 20:50

As I've said in the e-mail I sent today: I think it's a hardware issue.

Most hardware issues are intermittent, this thing however reacts the same everytime. So weird.
Bitte schreiben Sie Deutsch, when I'm responding in the German-speaking part of the forum!

Benutzeravatar
SisterOfMercy
Beiträge: 1023
Registriert: 22 Jun 2012, 19:18

Re: opsi client agent installation fails due to ssl3 error [solved]

Beitragvon SisterOfMercy » 03 Jul 2018, 14:45

After replacing the mainboard everything works as it should.
Bitte schreiben Sie Deutsch, when I'm responding in the German-speaking part of the forum!