Shibboleth SP 2.5.0 Windows installer for Apache 2.4.x - Incomplete installation with Uninstall errors

[Rod Widdowson]

> Installation didn't report any errors. However, upon looking at the directory structure, it appears
> that the core configuration files (such as shibboleth2.xml, apache24.config, attribute-map.xml, etc)
> were missing at C:\opt\shibboleth-sp\etc\shibboleth. Similarly, C:\opt\shibboleth-
> sp\var\log\shibboleth has some missing log files. As expected, the Shibboleth service wouldn't start.

This looks very much as if the install *DID* fail and did an undo.  However the installer seems to think that all went OK and that
is mysterious, particularly since in this version successful start of the shibd service is a requirement for a successful install.  

Of course, what we want is the MSI log from the install and the time for that is long gone....  However I would be interested to see
what (if anything) is in the Installer log (C:\opt\shibboleth-sp\var\log\shibboleth\Installer.log).

Had this machine any history of Shibboleth installs (including 2.5.x) ones?  Is IIS installed?

As for the uninstall, I am not sure why you are down here, but I have entered case
https://issues.shibboleth.net/jira/browse/SSPCPP-510 to fix the inability to uninstall.   If this is blocking you (and I cannot see
how it could not), let me know and I'll send you an installer which should fix this.

To answer some of your questions:

> 1. Did anyone ran into this install/uninstall issues with the most recent Shibboleth SP 2.5.0 windows
> MSI installer for Apache 2.4.x on Windows Server 2003 SP2?

(obviously) not in our testing.  

> 
> 2. What kind of user security privileges with local security policies needed to run the Shibboleth SP
> 2.5.0 MSI installer?

The MSI is marked as raise to admin, which of course does not help you on W2K3.  So there is as assumption that you will run as
admin on 2K3.  

Off the top of my heads an install process has to have write access to \program files\ and to \Documents and Settings\All
Users\Application Data\ as well as the ability to create a service.  My experience in general is that if you had insufficient privs
the install would fail, not "sort of succeed".  

Rod

> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Patibanda, Seshi
> K.
> Sent: 28 September 2012 20:03
> To: users at shibboleth.net
> Subject: Shibboleth SP 2.5.0 Windows installer for Apache 2.4.x - Incomplete installation with
> Uninstall errors
> 
> Hello all,
> 
> Installed Shibboleth SP 2.5.0 for Apache 2.4.x using the distributed windows installer (shibboleth-sp-
> 2.5.0-win32.msi, dated 06-SEP-2012) at the default installation location (C:\opt\shibboleth-sp\) on
> Windows Server 2003 Enterprise Edition SP2 Build 3790.
> 
> ========================================================
> Our server configuration:
> Total Physical Memory:     1,023 MB
> Available Physical Memory: 756 MB
> Page File: Max Size:       2,470 MB
> Page File: Available:      2,306 MB
> C:\ drive - Available hard disk storage - 1.7 GB
> ========================================================
> 
> Before installing, made sure to update the System PATH environment variable by adding the value
> C:\Program Files\Shibboleth\SP\lib (as recommended by Shibboleth).
> 
> Installation didn't report any errors. However, upon looking at the directory structure, it appears
> that the core configuration files (such as shibboleth2.xml, apache24.config, attribute-map.xml, etc)
> were missing at C:\opt\shibboleth-sp\etc\shibboleth. Similarly, C:\opt\shibboleth-
> sp\var\log\shibboleth has some missing log files. As expected, the Shibboleth service wouldn't start.
> 
> All attempts to remove the Shibboleth SP 2.5.0 installation FAILED. To further troubleshoot the
> uninstall errors, ran the following windows installer command line option:
> msiexec /x shibboleth-sp-2.5.0-win32.msi /qn /l*v uninstall.log
> 
> >From the uninstall.log snippet (given below), it appears that the
> uninstall was failing to execute a custom action ShibUninstallISAPIFilter. Not sure why this custom
> action was being executed as this action ShibInstallISAPIFilter was skipped during "repair install"
> phase (ran using the msiexec command line options to repair a failed installation and captured the
> info in a repair_install.log file).
> 
> ========================================================================
> ========================================
> MSI (s) (80:1C) [15:35:10:988]: Executing op:
> ActionStart(Name=ShibUninstallISAPIFilter,,)
> MSI (s) (80:1C) [15:35:10:988]: Executing op:
> CustomActionSchedule(Action=ShibUninstallISAPIFilter,ActionType=3078,Sou
> rce=Sub DeleteISAPIFilters(IISPath,dllPath)
> 
>   Dim filter, FiltersObj, LoadOrder, FilterArray, FilterItem
> 
>   Set FiltersObj = GetObject(IISPath & "/Filters")
>   LoadOrder = FiltersObj.FilterLoadOrder
> 
>   for each filter in FiltersObj
>     if (filter.Class = "IIsFilter") then
>       if (filter.FilterPath = dllPath) then
> 
>         'Delete the found filter here
>         'If there's anything to potentially delete...
>         if (LoadOrder <> "") then
>           FilterArray = split(LoadOrder,",")
>           LoadOrder = ""
>           for each FilterItem in FilterArray
>             if (FilterItem <> filter.Name) then
>               LoadOrder = LoadOrder & FilterItem & ","
>             end if
>           next
>           'Remove trailing comma if any filters were kept
>           if (LoadOrder <> "") then
>             LoadOrder = mid(LoadOrder,1,len(LoadOrder)-1)
>           end if
> 
>           'Set the Load Order to the new shibboleth-less order
>           if (FiltersObj.
> MSI (s) (80:24) [15:35:10:988]: Generating random cookie.
> MSI (s) (80:24) [15:35:11:003]: Created Custom Action Server with PID
> 3624 (0xE28).
> MSI (s) (80:34) [15:35:11:035]: Running as a service.
> MSI (s) (80:34) [15:35:11:035]: Hello, I'm your 32bit Elevated custom action server.
> MSI (s) (80:54) [15:35:11:097]: Note: 1: 2205 2:  3: Error MSI (s) (80:54) [15:35:11:097]: Note: 1:
> 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1720 MSI (s) (80:54)
> [15:35:11:097]: Note: 1: 2205 2:  3: Error MSI (s) (80:54) [15:35:11:097]: Note: 1: 2228 2:  3: Error
> 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709 MSI (s) (80:54) [15:35:11:097]: Product:
> Shibboleth Service Provider -- Error 1720. There is a problem with this Windows Installer package. A
> script required for this install to complete could not be run. Contact your support personnel or
> package vendor.  Custom action ShibUninstallISAPIFilter script error -2146827859, Microsoft VBScript
> runtime error: ActiveX component can't create object:
> 'Scripting.FileSystemObject' Line 88, Column 1,
> 
> Error 1720. There is a problem with this Windows Installer package. A script required for this install
> to complete could not be run. Contact your support personnel or package vendor.  Custom action
> ShibUninstallISAPIFilter script error -2146827859, Microsoft VBScript runtime error: ActiveX component
> can't create object:
> 'Scripting.FileSystemObject' Line 88, Column 1,
> 
> 
> ========================================================================
> ========================================
> 
> Couple of questions:
> 
> 1. Did anyone ran into this install/uninstall issues with the most recent Shibboleth SP 2.5.0 windows
> MSI installer for Apache 2.4.x on Windows Server 2003 SP2?
> 
> 2. What kind of user security privileges with local security policies needed to run the Shibboleth SP
> 2.5.0 MSI installer?
> 
> 3. If our server memory/storage space configuration is not sufficient to install the Shibboleth SP 2.5
> component, do you have any minimum server requirements?
> 
> Any feedback/suggestions/comments are highly appreciated.
> 
> Thanks,
> Seshi Patibanda
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net