Silent Shibboleth Windows Install

[Steven Teixeira]

I refrained from submitting a JIRA case against this and waited for v3.3 to test again.  Now that v3.3 is here, I tried this again with NO_FIREWALL_EXCEPTION=true, and it still appears to hang during silent install.  Before I opened up a case, I just wanted to make sure I wasn't missing something obvious.  I tried the following:

msiexec /i "C:\install\shibboleth-identity-provider-3.3.0-x64.msi" /qn /lv*! C:\temp\test.txt NO_FIREWALL_EXCEPTION=true INSTALL_JETTY=yes DNSNAME=shibboleth.example.org IDP_SCOPE=example.org

When it hangs, there are several folders missing from IDP_HOME such as credentials, flows, messages, metadata, static, views, and a couple others.

This is the last thing recorded in the logfile:

MSI (s) (64:2C) [11:34:33:028]: Executing op: CacheSizeFlush(,)
MSI (s) (64:2C) [11:34:33:106]: Executing op: ActionStart(Name=WriteConfigFiles,,)
MSI (s) (64:2C) [11:34:33:231]: Executing op: CustomActionSchedule(Action=WriteConfigFiles,ActionType=7174,Source='
' Code taken from the Shib SP install
'
Dim FileSystemObj, AntFile, PropsFile, JettyFile, JettyAntFile, LogFile
Dim CustomData, msiProperties, InstallDir, IdPScope, DebugInstall
Dim ConfigureAd, AdDomain, AdUser, AdPass, AdUseGC, LDAPFile, LDAPPort
Dim LDAPSearchPath

Set FileSystemObj = CreateObject("Scripting.FileSystemObject")

' Eek 
on error resume next

'Get the Parameters values via CustomActionData
CustomData = Session.Property("CustomActionData")
msiProperties = split(CustomData,";@;")
InstallDir = msiProperties(0)

'Remove all trailing backslashes to normalize
do while (mid(InstallDir,Len(InstallDir),1) = "\")
  InstallDir = mid(InstallDir,1,Len(InstallDir)-1)
loop
set LogFile=FileSystemObj.OpenTextFile(InstallDir & "\idp_installation.Log" , 2, True)

InstallDirJava = Replace(InstallDir, "\", "/")
InstallDirWindows = Replace(InstallDirJava, "/", "\\")

IdPHostName = LCase(msiProperties(1))
InstallJetty = LCase(msiProperties(2))
Id
MSI (s) (64:88) [11:34:33:325]: Generating random cookie.
MSI (s) (64:88) [11:34:33:403]: Created Custom Action Server with PID 3388 (0xD3C).
MSI (s) (64:F4) [11:34:33:497]: Running as a service.
MSI (s) (64:F4) [11:34:33:576]: Hello, I'm your 64bit Elevated Non-remapped custom action server.


Running the msiexec command with the /qr switch instead of the /qn switch still works.  It looks like it's hanging somewhere else this time, since it does get further than when this was hanging in v3.2.1 and firewall exceptions are not created using the NO_FIREWALL_EXCEPTION property.  Looking at the log, it seems that the next step that isn't being done when /qn is used is:

MSI (s) (64:88) [13:48:59:603]: Executing op: ActionStart(Name=QtIdpAnt,Description=Performing IdP Installation tasks; this may take some time.,)
Action 13:48:59: QtIdpAnt. Performing IdP Installation tasks; this may take some time.

Steven Teixeira


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Steven Teixeira
Sent: Thursday, September 22, 2016 9:49 AM
To: Shib Users <users at shibboleth.net>
Subject: RE: Silent Shibboleth Windows Install

Thanks again.

We have the Windows Firewall service running at time of install and I do see the exceptions get created.  I did try suppressing the firewall exceptions per the documentation before I realized it wasn't implemented in v3.2.  I'll look forward to v3.3.

Steven Teixeira


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: Thursday, September 22, 2016 5:51 AM
To: 'Shib Users' <users at shibboleth.net>
Subject: RE: Silent Shibboleth Windows Install

FWIW 

It does appear to be to do with the Firewall exceptions.  In V3.3 you will be able to supress this, and with that in place I can make an installation complete (whereas previously I couldn't)

The code we use to add exceptions is part of the toolset we use and I am chasing that up.

/Rod

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net