[resolved]: Installation of Opsi-product failed (error 1208)

[bourhis]

Hi,

since yesterday I can't install any "localboot" product ; I have this error :

Code: Alles auswählen

[event processing on_demand{user_logged_in}] Failed to mount '\\bropsi\opsi_depot': (1208, 'WNetAddConnection2', 'Une erreur étendue s’est produite.')   (Windows.py:882)

N.B. : if I try to mount "manually" (in Windows explorer) \\bropsi\opsi_depot with "pcpatch" user, it's work

Any idea ?

Best regards

[bourhis]

Another error message if I try to install a "netboo" product :

Code: Alles auswählen

RuntimeError('Failed to mount \'//bropsi/opsi_depot\' : Command \'/bin/mount -t cifs -o "iocharset=utf8,vers=1.0,noserverino,domain=IUTB,credentials=/tmp/tmptyfllt_2" //bropsi/opsi_depot /mnt/opsi\' failed (32):\nmount
error(127): Key has expired\nRefer to the mount.cifs(8) manual page (e.g. man mount.cifs) and kernel log messages (dmesg)\n')

[j.schneider]

Hello,

did you try to set a new password for pcpatch?
You can use this command on the opsi server:

Code: Alles auswählen

opsiconfd setup --set-depot-user-password

Best regards,
Jan Schneider

[bourhis]

Hi,
yes... with no effect !
Like I say, I can mount "manually" this share in a windows explorer with the "pcpatch" user...
Regards

[j.schneider]

Is the opsi server a domain member?
What is the output of the following command?

Code: Alles auswählen

pdbedit -L -v pcpatch

[bourhis]

Hi,

I found the problem: it came from the fact that the "pcpatch" and "opsiconfd" accounts had an expiration date... which was due to a particular configuration of my server!

My "bropsi" server runs with a "Debian buster" linux distribution and, in addition to Opsi, is used as a samba server for an "install" share containing all the software and drivers intended for our technicians.
To avoid having a redundancy of "big" software (for example: "Autocad", "Catia", ...) rather than including them in the "localboot" products, I directly call their location on "install".
i.e. in "setup.ins" instead of launching for example:

Code: Alles auswählen

"%ScriptPath%\V5-6R2022.CATIA_P2.win_b64.1-2\WIN64\StartB.exe" -newdir -ident V56R2022 -v -all -noreboot -addUserPrivilegesForOrbix

this would require having, not only 3 GB in the /home/opsiproducts/catia/CLIENT_DATA directory, these same 3 GB in /var/lib/opsi/depot/catia but also in the "install" share intended for technicians!
So I use the share directly in my script:

Code: Alles auswählen

"\\bropsi\brinstall\logiciels\dassault\V5-6R2022\V5-6R2022.CATIA_P2.win_b64.1-2\WIN64\StartB.exe" -newdir -ident V56R2022 -v -all -noreboot -addUserPrivilegesForOrbix

but with a trick because I actually have 2 shares on the same directory:
- "\\bropsi\install": on our domain with the "acls"
- "\\bropsi\brinstall": local to the server for the "Opsi" scripts
this one ("brinstall") has the same rights as "opsi_depot" and, to have the right "owners", I duplicated the "pcpatch" and "opsiconfd" accounts on our AD (with the same password, uid, gid).
N.B.: I still have to adjust the rights:

Code: Alles auswählen

chmod o+r,o+x -R /var/lib/opsi/depot/

==> these are the 2 accounts for which I had not checked "Password never expires" in our AD!

Best regards.