Page 1 of 1

[SOLVED] Problem mounting PC in console

Published: March 7, 2023 - 10:09 AM
by LPL
Good morning,
As a new purchaser of WAPT version 2.3, I am experiencing difficulties in displaying PCs in the console.
I'm deploying via a GPO, and the agent installs "correctly," and I have access to the self-service software (I can install/uninstall it). However, the PCs aren't showing up in the console.
Furthermore, when I try to do: wapt-get register, I get errors related to "gssapi".

Code: Select all

C:\windows\system32>wapt-get register
About to speak to waptservice...
Waptservice User :lpl.test
Password: ************
Informer le serveur de l'inventaire de cette machine
GSSAPIProxy requires the Python gssapi library: No module named 'gssapi'
Traceback (most recent call last):ver : 0% completed
  File "C:\Program Files (x86)\wapt\waptservice\service.py", line 1907, in run
    self.running_task.run()
  File "C:\Program Files (x86)\wapt\waptservice\waptservice_common.py", line 710, in run
    self._run()
  File "C:\Program Files (x86)\wapt\waptservice\waptservice_common.py", line 1071, in _run
    self.result = self.wapt.register_computer(description=self.computer_description)
  File "C:\Program Files (x86)\wapt\common.py", line 5975, in register_computer
    result = self.waptserver.post(urladdhost,
  File "C:\Program Files (x86)\wapt\common.py", line 1949, in post
    req = session.post("%s/%s" % (self.server_url, action),
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests\sessions.py", line 590, in post
    return self.request('POST', url, data=data, json=json, **kwargs)
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests\sessions.py", line 542, in request
    resp = self.send(prep, **send_kwargs)
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests\sessions.py", line 662, in send
    r = dispatch_hook('response', hooks, r, **kwargs)
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests\hooks.py", line 31, in dispatch_hook
    _hook_data = hook(hook_data, **kwargs)
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests_kerberos\kerberos_.py", line 393, in handle_response
    _r = self.handle_401(response, **kwargs)
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests_kerberos\kerberos_.py", line 276, in handle_401
    _r = self.authenticate_user(response, **kwargs)
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests_kerberos\kerberos_.py", line 246, in authenticate_user
    auth_header = self.generate_request_header(response, host)
  File "C:\Program Files (x86)\wapt\lib\site-packages\requests_kerberos\kerberos_.py", line 213, in generate_request_header
    self._context[host] = ctx = spnego.client(
  File "C:\Program Files (x86)\wapt\lib\site-packages\spnego\auth.py", line 169, in client
    return _new_context(
  File "C:\Program Files (x86)\wapt\lib\site-packages\spnego\auth.py", line 84, in _new_context
    return proxy(
  File "C:\Program Files (x86)\wapt\lib\site-packages\spnego\_gss.py", line 310, in __init__
    raise ImportError("GSSAPIProxy requires the Python gssapi library: %s" % GSSAPI_IMP_ERR)
ImportError: GSSAPIProxy requires the Python gssapi library: No module named 'gssapi'

ImportError: GSSAPIProxy requires the Python gssapi library: No module named 'gssapi'

It should be noted that if I install "wpatagent.exe" directly, the PC does appear correctly in the console

I can't figure out where the problem might be coming from, do you have any suggestions?

Thank you in advance for your help.

Re: Problem mounting PC in the console

Published: March 7, 2023 - 3:16 PM
by dcardon
Hello LPL,

what is the exact version of WAPT? What is the version of the machine on which the agent is running? Was the command line launched in a command prompt, PowerShell, or WSL?

It's quite strange because the GSAPI module shouldn't have been searched for (it's only needed on Linux...).

Is the machine properly joined to a domain?

Regards,

Denis

Re: Problem mounting PC in the console

Published: March 7, 2023 - 5:03 PM
by LPL
Below are my answers: What is

the exact version of WAPT? 2.3.0.13505.

What is the version of the machine on which the agent is running? Windows 10 21H2 with the 2023-02 cumulative update.

Was the command line launched in cmd, PowerShell, or WSL? I tried in cmd and PowerShell: the result is the same.

Is the machine properly joined to a domain? Yes: I performed the tests on my work PC, which shows up correctly in the console because I installed the agent manually, and on a test PC (also in the domain) with an agent deployed via GPO that does not show up in the console: the result is the same.

[SOLVED] Re: Problem mounting PC in the console

Published: March 9, 2023 - 11:37
by sfonteneau
Good morning

Following a telephone debugging, the problem has been identified.

when the command was typed:

Code: Select all

klist GET HTTP/srvwapt.ad.tranquil.it
So, no Wapt command, Windows responds:

The requested encryption type is not supported, probably related to a GPO on the machine.

We therefore modified the value of the msDS-SupportedEncryptionTypes attribute of the wapt server account in AD to switch it to 24 = ( aes128-cts-hmac-sha1-96 , aes256-cts-hmac-sha1-96 )

In this way, the ad only returns tickets (aes128 or aes256)

It's generally good practice to reject lower encryption levels, so I'll probably add it to the WAPT documentation to indicate how to modify msDS-SupportedEncryptionTypes

Re: [SOLVED] Problem mounting PC in the console

Published: March 9, 2023 - 12:42
by LPL
Hello,

thank you for the assistance provided with speed, efficiency and professionalism :-)

. Sincerely.