Seite 1 von 2

[SOLVED] OpennSSL install

Verfasst: 27 Okt 2010, 14:39
von dixgrammes
Hi,

when I install a new PC with Windows XP, i've got a security message from OpenSSL installation (the publisher can't be verified)

Well, i can clik on the Execute Button and it's all right, but I want a full automated installation

Thanks for all

Diggy

Re: OpennSSL install

Verfasst: 27 Okt 2010, 17:38
von d.oertel
Hi,

this should normally not happen.
So give us more detailed Information:
opsi version, preloginloader/opsi-client-agent version, depoturl

regards

d.oertel

Re: OpennSSL install

Verfasst: 28 Okt 2010, 13:46
von DirtyHarryIV
Hi!
Same Problem Here!

OPSI Version = 4.0
opsi-client-agent = 4.0-5
depoturl = st00177.ukl.uni-freiburg.de
Windows XP SP3

Thanks in advance!

Harald

Re: OpennSSL install

Verfasst: 30 Okt 2010, 19:19
von d.oertel
Hi,

the opsi depot is configured as 'trusted' a the time of the opsi-client-agent installation.
So normally there should be no question if you install software from this share.
How ever: Windows XP has the rule that a share which is mounted via netbios name is good (internal) and a share which is mounted vi IP-Name or IP-Number is evil (extern).

Perhaps something likes that happens at your installation.

For futher investigation i need a c:\tmp\opsiclientd.log.

regards

d.oertel

Re: OpennSSL install

Verfasst: 02 Nov 2010, 14:41
von DirtyHarryIV
Hi!
See attachment!

regards

Harald

Re: OpennSSL install

Verfasst: 04 Nov 2010, 19:15
von d.oertel
Hi,

this log file is produced while no product actions where set:

Code: Alles auswählen

[5] [Nov 02 13:59:31] [event processing gui_startup]   No product action requests set     (Opsiclientd.pyo|1757)
Therefor no mount is done.
Please give us the same log file from a situation where the problem take place.
And please add the c:\tmp\opsi-client-agen.log

regards

d.oertel

Re: OpennSSL install

Verfasst: 08 Nov 2010, 18:04
von DirtyHarryIV
Hi!

I solved the problem by adding:
"regedit /s removeaes.reg"
to the unattend.txt

removeaes.reg contains the following:

Code: Alles auswählen

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Associations]
"LowRiskFileTypes"=".exe;.bat"

Re: OpennSSL install

Verfasst: 08 Nov 2010, 20:15
von d.oertel
Hi DirtyHarryIV,

this is a really dirty hack.

It will work, but we recommend nobody to work with that hack in a productive environment.

regards

d.oertel

Re: OpennSSL install

Verfasst: 10 Nov 2010, 17:04
von dixgrammes
Hi

this a log file

thanks a lot

dig

Re: OpennSSL install

Verfasst: 11 Nov 2010, 09:58
von wolfbardo
Hi, see detlefs message before...

this log file is produced while no product actions where set:

Code: Alles auswählen

[5] [Nov 10 17:01:23] [event processing gui_startup]   No product action requests set     (Opsiclientd.pyo|1690)


Therefor no mount is done.
Please give us the same log file from a situation where the problem take place.

Also check on the Client the entry set by the preloginloader/opsi-client-agent script

Code: Alles auswählen

[Registry_hklm_set_depotshare_trusted]
openkey [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\$INST_DepotServer$]
regards

Bardo Wolf