Shibboleth SP 2.5.0 Windows installer for Apache 2.4.x - Incomplete installation with Uninstall errors

[Patibanda, Seshi K.]

Greetings Rod,

Thanks a lot for your prompt feedback. Please find my responses enclosed
in <SKP> tags below:

Had this machine any history of Shibboleth installs (including 2.5.x)
ones?  Is IIS installed?
<SKP>===================================================================
========================================
Yes, we used to have an earlier version of Shibboleth SP 2.4.3 installed
on this box, but, we made sure to uninstall this version (using the
Remove option from Control Panel -> Add/Remove Programs) before
installing the latest release Shibboleth SP 2.5.0 (using the distributed
MSI installer). NO, IIS was never installed on this machine. Also, the
installer doesn't have any Advanced options to enable/disable components
(such as IIS support, etc) during installation. It was just a plain MSI
windows installer which doesn't seem to know which web server is being
used and asks us only for the installation path.
<SKP>===================================================================
========================================

As for the uninstall, I am not sure why you are down here, but I have
entered case
https://issues.shibboleth.net/jira/browse/SSPCPP-510 to fix the
inability to uninstall. If this is blocking you (and I cannot see how it
could not), let me know and I'll send you an installer which should fix
this.

<SKP>===================================================================
========================================Yes, Please send us the
installer for Shibboleth SP 2.5.0 to clean up the failed installation at
your earliest convenience. It would certainly help us moving forward.
Also, if possible, please send us the ZIP ARCHIVE of the Shibboleth SP
2.5.0 binaries to bypass the MSI windows installer (as a Plan B option).
Just like we did for Apache 2.4.x, we will extract your zipped binaries
and run the distributed service.bat batch file (if provided?) to install
the Shibboleth service daemon. Not sure if this option is feasible, but,
thought of giving a shot at it.
<SKP>===================================================================
========================================

Thanks,
Seshi Patibanda

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Rod Widdowson
Sent: Saturday, September 29, 2012 5:35 AM
To: 'Shib Users'
Subject: Shibboleth SP 2.5.0 Windows installer for Apache 2.4.x -
Incompleteinstallation with Uninstall errors

> Installation didn't report any errors. However, upon looking at the 
> directory structure, it appears that the core configuration files 
> (such as shibboleth2.xml, apache24.config, attribute-map.xml, etc) 
> were missing at C:\opt\shibboleth-sp\etc\shibboleth. Similarly,
C:\opt\shibboleth- sp\var\log\shibboleth has some missing log files. As
expected, the Shibboleth service wouldn't start.

This looks very much as if the install *DID* fail and did an undo.
However the installer seems to think that all went OK and that is
mysterious, particularly since in this version successful start of the
shibd service is a requirement for a successful install.  

Of course, what we want is the MSI log from the install and the time for
that is long gone....  However I would be interested to see what (if
anything) is in the Installer log
(C:\opt\shibboleth-sp\var\log\shibboleth\Installer.log).

Had this machine any history of Shibboleth installs (including 2.5.x)
ones?  Is IIS installed?

As for the uninstall, I am not sure why you are down here, but I have
entered case
https://issues.shibboleth.net/jira/browse/SSPCPP-510 to fix the
inability to uninstall.   If this is blocking you (and I cannot see
how it could not), let me know and I'll send you an installer which
should fix this.

To answer some of your questions:

> 1. Did anyone ran into this install/uninstall issues with the most 
> recent Shibboleth SP 2.5.0 windows MSI installer for Apache 2.4.x on
Windows Server 2003 SP2?

(obviously) not in our testing.  

> 
> 2. What kind of user security privileges with local security policies 
> needed to run the Shibboleth SP
> 2.5.0 MSI installer?

The MSI is marked as raise to admin, which of course does not help you
on W2K3.  So there is as assumption that you will run as admin on 2K3.  

Off the top of my heads an install process has to have write access to
\program files\ and to \Documents and Settings\All Users\Application
Data\ as well as the ability to create a service.  My experience in
general is that if you had insufficient privs the install would fail,
not "sort of succeed".  

Rod

> -----Original Message-----
> From: users-bounces at shibboleth.net 
> [mailto:users-bounces at shibboleth.net] On Behalf Of Patibanda, Seshi K.
> Sent: 28 September 2012 20:03
> To: users at shibboleth.net
> Subject: Shibboleth SP 2.5.0 Windows installer for Apache 2.4.x - 
> Incomplete installation with Uninstall errors
> 
> Hello all,
> 
> Installed Shibboleth SP 2.5.0 for Apache 2.4.x using the distributed 
> windows installer (shibboleth-sp- 2.5.0-win32.msi, dated 06-SEP-2012) 
> at the default installation location (C:\opt\shibboleth-sp\) on
Windows Server 2003 Enterprise Edition SP2 Build 3790.
> 
> ========================================================
> Our server configuration:
> Total Physical Memory:     1,023 MB
> Available Physical Memory: 756 MB
> Page File: Max Size:       2,470 MB
> Page File: Available:      2,306 MB
> C:\ drive - Available hard disk storage - 1.7 GB 
> ========================================================
> 
> Before installing, made sure to update the System PATH environment 
> variable by adding the value C:\Program Files\Shibboleth\SP\lib (as
recommended by Shibboleth).
> 
> Installation didn't report any errors. However, upon looking at the 
> directory structure, it appears that the core configuration files 
> (such as shibboleth2.xml, apache24.config, attribute-map.xml, etc) 
> were missing at C:\opt\shibboleth-sp\etc\shibboleth. Similarly,
C:\opt\shibboleth- sp\var\log\shibboleth has some missing log files. As
expected, the Shibboleth service wouldn't start.
> 
> All attempts to remove the Shibboleth SP 2.5.0 installation FAILED. To

> further troubleshoot the uninstall errors, ran the following windows
installer command line option:
> msiexec /x shibboleth-sp-2.5.0-win32.msi /qn /l*v uninstall.log
> 
> >From the uninstall.log snippet (given below), it appears that the
> uninstall was failing to execute a custom action 
> ShibUninstallISAPIFilter. Not sure why this custom action was being
executed as this action ShibInstallISAPIFilter was skipped during
"repair install"
> phase (ran using the msiexec command line options to repair a failed 
> installation and captured the info in a repair_install.log file).
> 
> ======================================================================
> == ========================================
> MSI (s) (80:1C) [15:35:10:988]: Executing op:
> ActionStart(Name=ShibUninstallISAPIFilter,,)
> MSI (s) (80:1C) [15:35:10:988]: Executing op:
> CustomActionSchedule(Action=ShibUninstallISAPIFilter,ActionType=3078,S
> ou rce=Sub DeleteISAPIFilters(IISPath,dllPath)
> 
>   Dim filter, FiltersObj, LoadOrder, FilterArray, FilterItem
> 
>   Set FiltersObj = GetObject(IISPath & "/Filters")
>   LoadOrder = FiltersObj.FilterLoadOrder
> 
>   for each filter in FiltersObj
>     if (filter.Class = "IIsFilter") then
>       if (filter.FilterPath = dllPath) then
> 
>         'Delete the found filter here
>         'If there's anything to potentially delete...
>         if (LoadOrder <> "") then
>           FilterArray = split(LoadOrder,",")
>           LoadOrder = ""
>           for each FilterItem in FilterArray
>             if (FilterItem <> filter.Name) then
>               LoadOrder = LoadOrder & FilterItem & ","
>             end if
>           next
>           'Remove trailing comma if any filters were kept
>           if (LoadOrder <> "") then
>             LoadOrder = mid(LoadOrder,1,len(LoadOrder)-1)
>           end if
> 
>           'Set the Load Order to the new shibboleth-less order
>           if (FiltersObj.
> MSI (s) (80:24) [15:35:10:988]: Generating random cookie.
> MSI (s) (80:24) [15:35:11:003]: Created Custom Action Server with PID
> 3624 (0xE28).
> MSI (s) (80:34) [15:35:11:035]: Running as a service.
> MSI (s) (80:34) [15:35:11:035]: Hello, I'm your 32bit Elevated custom
action server.
> MSI (s) (80:54) [15:35:11:097]: Note: 1: 2205 2:  3: Error MSI (s)
(80:54) [15:35:11:097]: Note: 1:
> 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 
> 1720 MSI (s) (80:54)
> [15:35:11:097]: Note: 1: 2205 2:  3: Error MSI (s) (80:54) 
> [15:35:11:097]: Note: 1: 2228 2:  3: Error
> 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709 MSI (s) (80:54)
[15:35:11:097]: Product:
> Shibboleth Service Provider -- Error 1720. There is a problem with 
> this Windows Installer package. A script required for this install to 
> complete could not be run. Contact your support personnel or package 
> vendor.  Custom action ShibUninstallISAPIFilter script error
-2146827859, Microsoft VBScript runtime error: ActiveX component can't
create object:
> 'Scripting.FileSystemObject' Line 88, Column 1,
> 
> Error 1720. There is a problem with this Windows Installer package. A 
> script required for this install to complete could not be run. Contact

> your support personnel or package vendor.  Custom action 
> ShibUninstallISAPIFilter script error -2146827859, Microsoft VBScript
runtime error: ActiveX component can't create object:
> 'Scripting.FileSystemObject' Line 88, Column 1,
> 
> 
> ======================================================================
> == ========================================
> 
> Couple of questions:
> 
> 1. Did anyone ran into this install/uninstall issues with the most 
> recent Shibboleth SP 2.5.0 windows MSI installer for Apache 2.4.x on
Windows Server 2003 SP2?
> 
> 2. What kind of user security privileges with local security policies 
> needed to run the Shibboleth SP
> 2.5.0 MSI installer?
> 
> 3. If our server memory/storage space configuration is not sufficient 
> to install the Shibboleth SP 2.5 component, do you have any minimum
server requirements?
> 
> Any feedback/suggestions/comments are highly appreciated.
> 
> Thanks,
> Seshi Patibanda
> 
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net