Docker Otter 3.0.10 Agentless don't work (Credentials)

Dan_Woolf

Hi @shiv03_9800,

No problem! Glad I can help!

Please let me know after Otter 3.0.11 is released if that fixes the PowerShell agent for you.

Thanks,
Dan

shiv03_9800

Hello Dan

For a PowerShell server (Otter 3.0.11+):

tried on otter:3.0.11.1 (and 3.0.12-ci.1).

I reproduce 2) "This parameter set requires WSMan, and no supported WSMan client library was found. WSMan is either not installed or unavailable for this system".

I sended some details in ticker '[EDO-7972]':
1. LogMessages.csv - sql-export table LogMessages;
2. ld.log.16 - LD_DEBUG=all with start Otter.Service;
3. lg.log.11 - with execute script "PowerShellDemo".
If install powershell and gss-ntlmssp (checked correct connect with 'Enter-PSSession -Authentication Negotiate'), and copy .so - message changed to 'NO_ACCESS' (I don't remember the exact text. He is in LogMessages, But not in ld.log.*).

Thanks,
Igor

rhessinger

Hi @shiv03_9800,

I just wanted to let you know that we have received the logs and we are currently looking into the issue. I will let you know when we have more information.

Thanks,
Rich

rhessinger

Hi @shiv03_9800,

After a bit more research, this looks like a problem with the deprecated omi library that Microsoft was using for PowerShell WSMan on Mac and Linux. We are still working through the problem, but I wanted to give you a quick update. I will provide an update when I have more information.

Thanks,
Rich

rhessinger

Hi @shiv03_9800,

After further research on this issue, it looks like PowerShell remoting via WSMan on Linux is not currently a supported feature from Microsoft. Even looking at the latest PowerShell Core SDK, they still have not added support for it as of yet. There is a new feature in PowerShell Core 7 that adds support for PSRemoting over SSH, but it includes a limited subset of commands. It would actually be better to just connect directly to the server using SSH in these cases. Especially since you would have to configure Window's built-in SSH server anyways.

The best option for connecting to Window's servers from Otter on Docker is to use the Inedo Agent. If you cannot use an Inedo Agent, then using SSH directly would be the fallback.

We will be making some changes, OT-430, to better address this issue in the UI and to bring awareness to the lack of support for PowerShell agent-less servers when using Docker. We will also be updating the documentation to reflect this.

Please let me know if you have any questions.

Thanks,
Rich

shiv03_9800

It is very sad, since it also:

Don't work with Inedo Agent (49.0.0, tried with docker 'otter 3.0.12-ci.1' and 3 windows machines W10/2016/2019):

Does not connect to the agent (always 'The connection was dropped'; aes / none, with [fw] open port: checked nc -v ip 46336);
And it does not allow changing "aes -> none" ('EncryptionKey' remains in the record in table 'Servers') [workaround: clear field "Encryption key"].

Bye.

PS: Ansible with Powershell 7
https://docs.ansible.com/ansible/latest/collections/ansible/windows/win_powershell_module.html

rhessinger

Hi @shiv03_9800,

Can you please clarify what is not working with Inedo Agent 49? Is the connection always dropped or just when running a PowerShell script through it? Is it a specific command that is failing? We have not heard of any limitations using the Inedo Agent from our Docker image as of yet and we have multiple customers that are currently using it without issue.

As for the configuration change, that is currently a bug. I have scheduled this to be fixed in the next release of Otter. It is being tracked as ticket OT-431.

Thanks,
Rich

shiv03_9800

[EDO-7981]
reinstall (with drop/create DB Otter) docker otter 3.0.12-ci.1, latest (3.0.11.1)

dont work, similarly ("drop").

EventViewer (for agent on clear WS2019) on start "InedoAgentService":
err app '.Net Runtime' 1023
The required library not exist hostfxr.dll shoulds in C:\Windows\Temp...\bin.

That is, the Otter-installer does not check, does not install dependencies.

with WS2019 was installed .Net FW Full 4.7.03190.
hostfxr.dll - (most likely) from Powershell7

shiv03_9800

In C:\Windows\Temp\InedoAgent...\bin - somehow not enough files: 23 (on other machine - only 7 - Otter*).
Deleting/Rename the folder C:\Windows\Temp\InedoAgent and restarting the service - no event error.
But the error is reproducible (both: message "droped" and 3 events "hostfxr.dll"/23 files).
Maybe there is a continuation of topic "Docker Otter 3.0.11 Segmentation fault (core dumped)"?

rhessinger

Hi @shiv03_9800,

We have just released a new version of Otter that includes a fix for the segmentation fault.

You will need to make sure that .NET Framework 4.5.1 or greater is installed on the Windows server. But if you were able to run the Inedo Agent installer, then chances are you already have that installed.

As for the Inedo Agent error, I talked with some colleagues and this is something we have seen on slower or congested networks when checking Inedo Agent has the components needed to communicate with Otter. Normally if you wait for the next server check to occur, the issue ends up resolving itself. There was another issue, however, that can affect PowerShell scripts when using the Docker version of Otter, OT-432. This was fixed in the latest release as well.

Thanks,
Rich