Posts made by shiv03_9800

(tried docker otter:3.0.14-ci.1) Situation: I want to schedule a job for detect and remediate drift every hour.

Jobs\Upcoming & Recurring\Create Recurring Job\Remediate Drift on Recurring Basis:

• Schedule: Custom
• Run at time: 0 0 * ? * * *
• [Create Job]

.1. Description: "Invalid chron expression:".

1. LogMessage:
   Logged:
   11/04/2021 13:00:39
   Level:
   Error
   Category:
   RecurringJobDispatcherRunner
   Message:
   Unhandled exception: cronExpression cannot be null
   Details:
   System.ArgumentException: cronExpression cannot be null
   at Quartz.CronExpression..ctor(String cronExpression)
   at Inedo.Otter.Service.TaskRunners.RecurringJobDispatcherRunner.GetNextRunTime(DateTimeOffset expectedNow, JobConfiguration jobConfig) in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp_E156460\Src\src\Otter.Service\TaskRunners\RecurringJobDispatcherRunner.cs:line 78
   at Inedo.Otter.Service.TaskRunners.RecurringJobDispatcherRunner.RunAsync(CancellationToken cancellationToken, Object args) in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp_E156460\Src\src\Otter.Service\TaskRunners\RecurringJobDispatcherRunner.cs:line 47
   at Inedo.TaskRunner.RunInternalAsync(Object args)

2. Value (of field Job_Configuration record in table Jobs) wo "CronSchedule":
   <Inedo.Otter.Jobs.JobConfiguration Assembly="OtterCoreEx"><Properties JobType="Configuration" ServerTargeting="RolesAndEnvironment" Simulation="False" Async="True"><ServerNames /><ServerRoleNames><Item>agent</Item></ServerRoleNames><EnvironmentNames /><Variables /></Properties></Inedo.Otter.Jobs.JobConfiguration>

3. If edit-recurring job:

• Schedule: "Every day"
• Run at time: (blank)

4. Equally for "Run Script on Recurring Basis".

5. Workaround:

   1. Create with Schedule: "Every day";
   2. Update sql-record in table Jobs with CronSchedule "0 0 * ? * * *".

.2. Edit-recurring (RemediateDrift Job) - "Script is required".

@gdivis Thank you very much (it works).

@shiv03_9800 said in Docker Otter 3.0.12 with InedoAgent The agent does not have a valid execution temp path:

You retold:
https://docs.inedo.com/docs/inedoagent-configuration-troubleshooting
But in both cases, it is missed workaround that here need to reconfigure in Otter the 'serverX' (pull the settings), for push content to blank temporary directory.
Otherwise - 'droped' execute with "Agent don't installed".
(This is not required in SSH-connect)

docker otter:3.0.14-ci.1 still reproduced "not documented '5. Do Otter\Servers\srvX\Details\Edit\OK'".

docker otter:3.0.13 (wo reinstall InedoAgent), exec PowerShellDemo.
Status: Warning
(Execution: OK)
Cleanup & Finalization:
DEBUG: Cleaning up temporary files on Inedo Agent (v??, 10.72.14.141:80)...
WARN: Unable to delete temporary directory "C:\ForInedoAgent\10.72.14.130\Temp_E1104" on Inedo Agent (v??, 10.72.14.141:80): Could not load file or assembly 'System.Private.CoreLib' or one of its dependencies. The system cannot find the file specified.

Hi,

@Dan_Woolf:
<OtterRootPath>C:\ForInedoAgent</OtterRootPath>
I tried both options yesterday - with a dot and without a dot, and together at once.

Can you please clarify what you are referring to when you say that you need to reconfigure Otter to blank the temporary directory. The Inedo Agent based servers do not have an option to set a temporary path directly in Otter.

Please, look [EDO-7988]

@rhessinger: [EDO-7988]

Hi @Dan_Woolf,

1. Answer:

   1. was as defaullt: BUILTIN\SYSTEM;
   2. no changes (the service is started as a new local user, folders appeared in the specified folder [C:\Tmp\otter], the error, subfolders and log is the same).

2. You retold:
   https://docs.inedo.com/docs/inedoagent-configuration-troubleshooting
   But in both cases, it is missed workaround that here need to reconfigure in Otter the 'serverX' (pull the settings), for push content to blank temporary directory.
   Otherwise - 'droped' execute with "Agent don't installed".
   (This is not required in SSH-connect)

On execute "PowerShellDemo" on "InedoAgent", error:
"The agent does not have a valid execution temp path.
Execution run failed."

Tried: on 3 machines: W10/2016/2019 (2019 - in one [Proxmox] host with docker).

With:
new DB Otter (or old from otter-3.0.10)
docker otter:3.0.12
Inedo Agent (v49, a1.b1.c1.d1:80/46336)
Encryption: None or AES
status="Ready" (empty LogMessages)

After execute:

1. LogMessages: empty

2. LogFile:
   dt: Connection request from a2.b2.c2.d2:nnnnn
   dt: Connection established with a2.b2.c2.d2:nnnnn
   dt DEBUG [s-x1] start message loop
   dt DEBUG [s-x1] waiting for message ...
   dt DEBUG [s-x1] message recieved (25 bytes)
   dt DEBUG [s-x1] waiting for message ...
   dt DEBUG [s-x1] message recieved (17 bytes)
   dt DEBUG [s-x1] waiting for message ...
   dt: a2.b2.c2.d2:nnnnn disconnected.
   dt DEBUG [s-x1] message recieved ((null) bytes)
   dt DEBUG [s-x1] terminated message loop

3. There are folders:

   1. %TEMP%:
      C:\Windows\Temp\Inedo
      ExtensionCache\ - with subfolders
      C:\Windows\Temp\InedoAgent\Otter\a2.b2.c2.d2
      Agents
      Extensions
      Temp\ - empty
   2. C:\ProgramData:
      C:\ProgramData\Inedo
      SharedConfig\ - with conf
      C:\ProgramData\InedoAgent\ - empty.

4. cacls on these folders:

   • with SYSTEM:F (InedoAgentService runas SYSTEM).
   • I added Everyone:F - without changes.

5. In C:\Windows\Temp\InedoAgent...\bin - somehow not enough files: 23 (on other machine - only 7 - Otter*).

6. Deleting/Rename the folder C:\Windows\Temp\InedoAgent and restarting the service - no event error.
   But the error is reproducible (both: message "droped" and 3 events "hostfxr.dll"/23 files).

7. Maybe there is a continuation of topic "Docker Otter 3.0.11 Segmentation fault (core dumped)"?

1. [EDO-7981]

2. reinstall (with drop/create DB Otter) docker otter 3.0.12-ci.1, latest (3.0.11.1)

• dont work, similarly ("drop").

3. EventViewer (for agent on clear WS2019) on start "InedoAgentService":
   err app '.Net Runtime' 1023
   The required library not exist hostfxr.dll shoulds in C:\Windows\Temp...\bin.

• That is, the Otter-installer does not check, does not install dependencies.

4. with WS2019 was installed .Net FW Full 4.7.03190.
   hostfxr.dll - (most likely) from Powershell7

It is very sad, since it also:

Don't work with Inedo Agent (49.0.0, tried with docker 'otter 3.0.12-ci.1' and 3 windows machines W10/2016/2019):

1. Does not connect to the agent (always 'The connection was dropped'; aes / none, with [fw] open port: checked nc -v ip 46336);
2. And it does not allow changing "aes -> none" ('EncryptionKey' remains in the record in table 'Servers') [workaround: clear field "Encryption key"].

Bye.

PS: Ansible with Powershell 7
https://docs.ansible.com/ansible/latest/collections/ansible/windows/win_powershell_module.html

Hello Dan

For a PowerShell server (Otter 3.0.11+):

tried on otter:3.0.11.1 (and 3.0.12-ci.1).

I reproduce 2) "This parameter set requires WSMan, and no supported WSMan client library was found. WSMan is either not installed or unavailable for this system".

1. I sended some details in ticker '[EDO-7972]':

   1. LogMessages.csv - sql-export table LogMessages;
   2. ld.log.16 - LD_DEBUG=all with start Otter.Service;
   3. lg.log.11 - with execute script "PowerShellDemo".

2. If install powershell and gss-ntlmssp (checked correct connect with 'Enter-PSSession -Authentication Negotiate'), and copy .so - message changed to 'NO_ACCESS' (I don't remember the exact text. He is in LogMessages, But not in ld.log.*).

Thanks,
Igor

Hello, Alana

In DiagnosticCenter\LogMessages only:
Error scanning PowerShell agent: MI_RESULT_ACCESS_DENIED ServerCheckerRunner 09/28/2021 03:29:38
Error scanning PowerShell agent: MI_RESULT_ACCESS_DENIED ServerCheckerRunner 09/26/2021 17:28:59
Error scanning PowerShell agent: MI_RESULT_ACCESS_DENIED ServerCheckerRunner 09/26/2021 17:28:59
...

here bold - last message before crash.

I sended some details with tiket '[EDO-7968]':

1. logs_otter*.txt - last result of command 'docker logs otter';
2. LogMessages.csv - sql-export of table 'LogMessages'.

I can collect data what you say.

Best wishes,
Igor

How to improve the stability of work - [1] periodically crashes if there are servers (tried with ssh and powershell agentless, Otter 3.0.8-3.0.11):

Running Execution Dispatcher...
Running Execution Dispatcher...
Execution Dispatcher completed.
Execution Dispatcher completed.
Initializing Log Retention...
Initializing Log Retention...
Log Retention initialized.
Log Retention initialized.
Running Log Retention...
Running Log Retention...
Log Retention completed.
Log Retention completed.
Running Server Checker...
Running Server Checker...
Checking servers...
Checking servers...
Beginning status check for SSH server on pxmx-1002...
Beginning status check for SSH server on pxmx-1002...
Attempting to connect to SSH server at 10.72.14.160:22...
Attempting to connect to SSH server at 10.72.14.160:22...
Beginning status check for SSH server on pxmx-148...
Beginning status check for SSH server on pxmx-148...
Attempting to connect to SSH server at 172.17.0.1:22...
Attempting to connect to SSH server at 172.17.0.1:22...
Server Checker completed.
Server Checker completed.
info: Microsoft.AspNetCore.Hosting.Diagnostics[1]
Request starting HTTP/1.1 POST http://pxmx-1013/0x44/Otter.WebApplication/Inedo.Otter.WebApplication.Controls.Layout.NotificationBar/GetNotifications - 0
info: Microsoft.AspNetCore.Hosting.Diagnostics[2]
Request finished HTTP/1.1 POST http://pxmx-1013/0x44/Otter.WebApplication/Inedo.Otter.WebApplication.Controls.Layout.NotificationBar/GetNotifications - 0 - 200 30 - 32.1763ms
Segmentation fault (core dumped)

2. 'docker start -ai otter' (or "docker rm otter; docker run -it --name=otter ...)

• Segmentation fault (core dumped)

3. Workaround: (before 'docker start') clear content of folder "Temp path" (/tmp/otter) on the last server (or otherwise - on all servers)

4. Quick repeated crash:

• [2] Creating a new server with incorrect parameters (workaround: delete record from table Servers);
• (or) [3] Changing the account ("Credentials" of server) with the same "Temp path" (workaround: separated /tmp/otter/username);
• (or) [4] Run script with any typo (workaround: delete record from table RaftItems).

@Dan_Woolf said in Docker Otter 3.0.10 Agentless don't work (Credentials):

For an SSH server:

Hi Dan,

For an SSH server:

Yes, this is worked - I manual doned all for connect without username and without password on terminal (docker exec -it otter bash)# ssh ipaddr_host_172.17.0.1 (with fulled /root/.ssh/*, "yes" on message "new footprint server"; And on server: set .ssh/authorized_keys; And set in Otter new CredentialsUserPassword with name "root.psw").

Thank you!

Hi Dan

Yes, that correct.

What need setup (may be packets, powershell7 lib*.so) on container "otter", for work with agentless PowerShell and SSH.

otter:latest (tried 3.0.8-3.0.10):

1. PS (communcation type): Servers\server\edit, select credent, save. Open - return on "Integrated authentication":

• save (to record in Servers) value CreditionalName as Credential_Id ("1")

2. PS (with manual update record with correct CredentialName): Scripts\PowerShellDemo, execute. Error:

Unhandled exception: System.Management.Automation.Remoting.PSRemotingTransportException: This parameter set requires WSMan, and no supported WSMan client library was found. WSMan is either not installed or unavailable for this system.
---> System.DllNotFoundException: Unable to load shared library 'libpsrpclient' or one of its dependencies. In order to help diagnose loading problems, consider setting the LD_DEBUG environment variable: liblibpsrpclient: cannot open shared object file: No such file or directory

If (install powershell7 and) copy libssl.so.1.0.0 libcrypto.so.1.0.0 to /usr/local/otter/service, text error change.

3. PS (with powershell): Scripts\PowerShellDemo, execute, error:

Unhandled exception: System.NullReferenceException: Object reference not set to an instance of an object.
at Inedo.Otter.Extensions.Agents.PowerShell.PowerShellAgent.GetCredentials() in C:\Users\builds\AppData\Local\Temp\InedoAgent\BuildMaster\192.168.44.60\Temp_E134041\Src\src\OtterCoreEx\Extensions\Agents\PowerShell\PowerShellAgent.cs:line 48

4. SSH-agent: Scripts\sh(echo 123), execute. Error:

Unhandled exception: System.ArgumentNullException: Value cannot be null. (Parameter 'credentials')
at Inedo.Agents.Ssh.SshConnectionInfo..ctor(String hostName, String tempPath, SshCredentials credentials, Nullable`1 timeout, Int32 port)

5. PS: How set "Integrated authentication"? (install gssntlm and restart)