search

recolic / microsoft-intune-archlinux

This is a read-only mirror for https://git.recolic.net/root/microsoft-intune-archlinux.git
16 stars 3 forks source link

Arch Linux Direct install #1

Open DaanA32 opened 1 year ago

DaanA32 commented 1 year ago

Hi Recolic,

I've managed to install all the necessary program using apt to download the package and then converting them with debtap. Now I'm able to logon after adjusting the JAVA_HOME in the systemd service files. After logging in I get the following: image

As well as the following ERROR messages:

2022-10-18T13:00:09.816381Z ERROR [OneAuth:Error:65vvv:df94a6f3-a363-4c34-b14c-7516188c0408] Failed to persist account
2022-10-18T13:00:10.110675Z ERROR [OneAuth:Error:50ko2:df94a6f3-a363-4c34-b14c-7516188c0408] (Code:4200) **** Unknown error code.
2022-10-18T13:00:10.110688Z ERROR [OneAuth:Error:9vdpp:df94a6f3-a363-4c34-b14c-7516188c0408] Unexpected error code: 4200
2022-10-18T13:00:18.294201Z ERROR [OneAuth:Error:5nhsj:7f7e47f6-87c8-4889-bc6c-d7f2f883f1a7] Hrd Parameter is null
2022-10-18T13:00:18.294335Z ERROR [OneAuth:Error:65vvv:7f7e47f6-87c8-4889-bc6c-d7f2f883f1a7] Failed to persist account
2022-10-18T13:00:18.298224Z ERROR [OneAuth:Error:65vvv:7f7e47f6-87c8-4889-bc6c-d7f2f883f1a7] Failed to persist account
2022-10-18T13:00:18.594087Z ERROR [MSAL:0007]   ERROR   ErrorInternalImpl:121       Created an error: 9u8f4, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 0, Context 'No refresh tokens available in the cache, but an account was found on disk. RT likely deleted.'
2022-10-18T13:00:19.469723Z ERROR [OneAuth:Error:65vvv:88d0b979-5d38-4102-a56f-b3a52c96b705] Failed to persist account
2022-10-18T13:00:19.472994Z ERROR [OneAuth:Error:65vvv:88d0b979-5d38-4102-a56f-b3a52c96b705] Failed to persist account
2022-10-18T13:00:19.759438Z ERROR [MSAL:0007]   ERROR   ErrorInternalImpl:121   Created an error: 9u8f4, StatusInternal::InteractionRequired, InternalEvent::None, Error Code 0, Context 'No refresh tokens available in the cache, but an account was found on disk. RT likely deleted.'
2022-10-18T13:00:20.364477Z ERROR [OneAuth:Error:65vvv:a4e8eba6-99aa-4856-920f-78a4ff701dcf] Failed to persist account
2022-10-18T13:00:20.367565Z ERROR [OneAuth:Error:65vvv:a4e8eba6-99aa-4856-920f-78a4ff701dcf] Failed to persist account
2022-10-18T13:00:20.756497Z ERROR [OneAuth:Error:65vvv:c5b2ddbe-003d-446e-95fe-d2fb814049f4] Failed to persist account
2022-10-18T13:00:20.759914Z ERROR [OneAuth:Error:65vvv:c5b2ddbe-003d-446e-95fe-d2fb814049f4] Failed to persist account
2022-10-18T13:00:21.451876Z ERROR Error calling IWS for Terms of Use: Unexpected failure: Bad Request

Have you encountered this? Best wishes, Daan

recolic commented 1 year ago

Hi. please read the README to get the results of journalctl, and see if there is anything suspicious in the log.

recolic commented 1 year ago

Note that if you are following some other guide to setup intune, do not report bug here. Report bug to the solution provider.

If you would like to contribute a working level-2 solution for archlinux, we want to create some verified archlinux native packages instead of using debtap. debtap might not work as expected sometimes.

DaanA32 commented 1 year ago

Hi Recolic,

Thanks for responding. I am trying to do a native install instead of the way you described. I haven't seen anything suspicious, but will take another look. The logs for user service msft-identity-broker.service seem to be empty so I may be missing something there.

Best wishes, Daan

DaanA32 commented 1 year ago

I've looked at the logs in both the user and system identity brokers, they close after completing authentication. It seems to me that the main issue stems from

2022-10-18T13:00:21.451876Z ERROR Error calling IWS for Terms of Use: Unexpected failure: Bad Request

I've tried to find where this happens by using wireshark, but I have not found it.

nurfed1 commented 10 months ago

I got the intune app working on my arch box. I think all I needed to get past that error was to modify the os-release file.

cat /etc/os-release 

PRETTY_NAME="Ubuntu 22.04.3 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.3 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
erenoglu commented 9 months ago

I got the intune app working on my arch box. I think all I needed to get past that error was to modify the os-release file.

cat /etc/os-release

PRETTY_NAME="Ubuntu 22.04.3 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.3 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu

Hi, is this a direct install or using another ubuntu box certificates? Were you able to enroll?

nurfed1 commented 9 months ago

I got the intune app working on my arch box. I think all I needed to get past that error was to modify the os-release file. cat /etc/os-release

PRETTY_NAME="Ubuntu 22.04.3 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.3 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu

Hi, is this a direct install or using another ubuntu box certificates? Were you able to enroll?

Direct install

erenoglu commented 9 months ago

Thanks. I managed to install it as well and even managed to enroll after creating /etc/os-release and obeying other policies enforced by the server.

@recolic , would you consider maybe packaging the whole thing into one package in Aur so others could also give it a try?

Strit commented 9 months ago

I also managed to get it all installed and enroll.

I am considering creating AUR packages for intune-portal and it's dependencies from this repo. Would you be okay with that or do you want to do it yourself?

recolic commented 9 months ago

Could you make the change and raise a PR? Thanks.

it's okay to open a PR to this GitHub repo. I will copy it to the original gitlab repo.

Oct 5, 2023 03:19:31 Dan Johansen @.***>:

I also managed to get it all installed and enroll.

I am considering creating AUR packages for intune-portal and it's dependencies from this repo. Would you be okay with that or do you want to do it yourself?

— Reply to this email directly, view it on GitHub[https://github.com/recolic/microsoft-intune-archlinux/issues/1#issuecomment-1748603546], or unsubscribe[https://github.com/notifications/unsubscribe-auth/AEVTVEF534P7VY5LGB37DYLX52CR7AVCNFSM6AAAAAARIEK6TGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTONBYGYYDGNJUGY]. You are receiving this because you were mentioned. [Tracking image][https://github.com/notifications/beacon/AEVTVEELPKUORUZQQUBUJR3X52CR7A5CNFSM6AAAAAARIEK6TGWGG33NNVSW45C7OR4XAZNMJFZXG5LFINXW23LFNZ2KUY3PNVWWK3TUL5UWJTTIHGJJU.gif]

recolic commented 9 months ago

Thanks. I managed to install it as well and even managed to enroll after creating /etc/os-release and obeying other policies enforced by the server.

@recolic , would you consider maybe packaging the whole thing into one package in Aur so others could also give it a try?

emm I don't think we should merge everything into one package.

Firstly, it's not how ArchLinux packaging system works. Secondly, they are also not doing this for Ubuntu side.

I think we should simply port the official things (deb package) to archlinux, keep the original structure, and populate the dependency information correctly.

Strit commented 9 months ago

I seem to be missing something. The intune-agent does not check-in because it's waiting for user login. Even though I just used the portal to log in. So I'm missing something that "keeps" me logged in, so the agent can send information regularly.

Any ideas?

erenoglu commented 9 months ago

Did you check the logs when run from a terminal? Do you have edge installed just in case? Also even on Ubuntu I launch intune from time to time and it's always in logged out state, I click login and then it works to check compliance.

recolic commented 9 months ago

I seem to be missing something. The intune-agent does not check-in because it's waiting for user login. Even though I just used the portal to log in. So I'm missing something that "keeps" me logged in, so the agent can send information regularly.

Any ideas?

Note that github issue is not "chat room".

Could you collect all info (for example, what error log do you see, what did you do, and the error screenshot) and open a new issue? It's going off-topic...

Strit commented 9 months ago

Sure. I don't know any chatroom related to Intune on Arch. But I'll bounce. No worries.

EndruK commented 5 months ago

I also have issues getting the release info lined up with the policies. It seems, that on manjaro, the /etc/os-release file is not accessed by intune, but the /etc/lsb-release file.

when I change /etc/lsb-release from

DISTRIB_ID="ManjaroLinux"
DISTRIB_RELEASE="23.1.2"
DISTRIB_CODENAME="Vulcan"
DISTRIB_DESCRIPTION="Manjaro Linux"

to

DISTRIB_ID="Ubuntu"
DISTRIB_RELEASE="22.04"
DISTRIB_CODENAME="jammy"
DISTRIB_DESCRIPTION="Ubuntu 22.04.3 LTS"

intune has at lease the ubuntu os figured out - however, it is still not compliant with the policy for allowed os distributions

recolic commented 4 months ago

I had a similar problem while enrolling an ArchLinux machine with lots of packages installed.

intune-portal will run /usr/bin/lsb_release to check for system information, and updating /etc/lsb-release is not sufficient.

Easy solution is: destroy the lsb_release program like sudo rm /usr/bin/lsb_release. (or write a fake one if you want)

Updated this solution into README.