new munkiwebadmin

[Steve Küng]

Hi all

I've updated the munkiwebadmin and here is the result:

https://github.com/SteveKueng/munkiwebadmin

new:

- munkireports over serial number

- bootstrap 3

- new design

- add software directly in machine view

Regards

Steve

[Gregory Neagle]

This looks sharp!

--
You received this message because you are subscribed to the Google Groups "MunkiWebAdmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-web-adm...@googlegroups.com.
Visit this group at http://groups.google.com/group/munki-web-admin.
For more options, visit https://groups.google.com/d/optout.

[Gregory Neagle]

There's no settings_template.py to copy at the root of the munkiwebadmin repo...

-Greg

[Gregory Neagle]

Some notes....

git clone https://github.com/SteveKueng/munkiwebadmin.git

cd munkiwebadmin
cp settings_template.py settings.py

Actually settings_template.py is another directory down in munkiwebadmin/munkiwebadmin

First attempt to run `python manage.py syncdb` failed because "ImportError: No module named django_wsgiserver"

So I did `pip install django-wsgiserver` -- hope I didn't need to pin to a specific version.

`python manage.py syncdb` threw a bunch of warnings but appeared to complete. I was prompted to create a superuser, which I did.

`python manage.py collectstatic` completed successfully.

`python manage.py runwsgiserver port=8000 host=0.0.0.0` showed some warnings, then failed with "AttributeError: 'module' object has no attribute 'AdminMediaHandler'".

Didn't know where to proceed from there.

-Greg

[Gregory Neagle]

FWIW I am excited about seeing some action on MWA.

I've been playing with pkginfo editing for a future version of MWA as well; the same editor could be used for manifest editing and allow display/editing of conditional items, which the current display/editor can't handle.

(What I'm working on is a general-purpose web-based plist editor...)

-Greg

[Steve Küng]

Sorry for the late answer... but for some reason I didn't get an email notification...

I changed the code but forgot to update the documentation... I'll fix that tomorrow and check the error with "python manage.py runwsgiserver port=8000 host=0.0.0.0"

Try:  "python manage.py runserver 0.0.0.0:8000" same error?

Editing the pkginfo is something I've planned.

 It would be so much easier editing software for all my colleagues witch aren't so well versed with command line munki commands... ;)

Steve

[Calum Hunter]

Very nice!

[Steve Küng]

So I fixed the warings and updated the documentation

Try it again!

Steve

[Timo Lemburg]

Steve,

this is awesome, I like the look and the dashboard. 

I just have one question: When I have a user without admin backend access the manifests entry in the sidebar menu is gone. I can still access the Manifests by going through a computer report or by using the URL /manifests.

Is this an expected feature or an error?

Regards,

Timo

  

[Steve Küng]

Hi Timo

Thanks!

This is more a feature than a bug. I'm trying out some permission stuff.

The idea is that you can give user specific rights for every link in the left menu.

For example:

- A Supporter can add software to clients and view the dashboard but can't edit manifests or view licenses. (We have manifests like "DefaultSoftware" and if you add software to this it has impact to all Macs and not all users should be able to edit this manifests)

So what you saw is a workaround.

Steve

[Timo Lemburg]

This sounds like a feature I could use, since I will manage Macs on several different regions/brands from one single repository.

I'll be glad to test everything you are doing in the direction.

Regards,

Timo

[Gregory Neagle]

On Feb 4, 2015, at 8:44 AM, Timo Lemburg <kon...@timo-lemburg.de> wrote:

This sounds like a feature I could use, since I will manage Macs on several different regions/brands from one single repository.

You might also look at Sal.

salsoftware.com

-Greg

Very nice!

Regards

Steve

--
You received this message because you are subscribed to the Google Groups "MunkiWebAdmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-web-adm...@googlegroups.com.
Visit this group at http://groups.google.com/group/munki-web-admin.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "MunkiWebAdmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to munki-web-adm...@googlegroups.com.
Visit this group at http://groups.google.com/group/munki-web-admin.
For more options, visit https://groups.google.com/d/optout.

[Timo Lemburg]

Thank you for the advice, I have that on my list for the next week.

Regards,

Timo

[Erik]

This looks great!

[Steve Küng]

hi all

I added some new features and started a documentation.

new:

- business units

- serial_number as client manifest

- secure reports with token

- authorization system

Steve

[Justin Phillips]

Steve - this looks great! I wanted to test it out so I threw it together but I'm having an issue with getting clients to populate:

I first tested the webserver, I can log in and see no clients. Good.

I then made the settings change to to the client config and copied them to a test client. Running managedsoftwareupdate -vvv gave me permission errors for the client files. Oops

I chown/chmod'd the 4 client files and tried again. I no longer get the permission error, yet there are still no clients in the webapp. Looking at the MySQL database, there is no info there, either.

I double-checked the user permissions and made sure everything was granted, tried again but same result.

I'm kind of at a loss.

[Justin Phillips]

Update to above: I checked server's munkiwebadmin.log as a client tried to connect, and this error keeps repeating:

Internal Server Error: /licenses/available/

Traceback (most recent call last):

  File "/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/core/handlers/base.py", line 111, in get_response

    response = wrapped_callback(request, *callback_args, **callback_kwargs)

  File "/Users/Shared/munkiwebadmin_env/munkiwebadmin/licenses/views.py", line 57, in available

    mimetype='application/xml')

  File "/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/http/response.py", line 318, in __init__

    super(HttpResponse, self).__init__(*args, **kwargs)

TypeError: __init__() got an unexpected keyword argument 'mimetype'

[Justin]

Finishing...

    Performing postflight tasks...

    postflight stderr: 2015-02-23 21:43:22.836 system_profiler[4549:48193] platformPluginDictionary: Can't get X86PlatformPlugin, return value 0

2015-02-23 21:43:22.837 system_profiler[4549:48193] platformPluginDictionary: Can't get X86PlatformPlugin, return value 0

Done.

--
You received this message because you are subscribed to a topic in the Google Groups "MunkiWebAdmin" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/munki-web-admin/4FS6U953rcc/unsubscribe.
To unsubscribe from this group and all its topics, send an email to munki-web-adm...@googlegroups.com.

[Justin Phillips]

And last update:

The client's managesoftwareupdate -vvv returns no error on the preflight, however the postflight is returning:

Finishing...

    Performing postflight tasks...

    postflight stderr: 2015-02-23 21:43:22.836 system_profiler[4549:48193] platformPluginDictionary: Can't get X86PlatformPlugin, return value 0

2015-02-23 21:43:22.837 system_profiler[4549:48193] platformPluginDictionary: Can't get X86PlatformPlugin, return value 0

Done.

I should point out that the server is OS X 10.9.5, which might be the issue.

[Steve Küng]

Hi Justin

The postflight errors aren't your problem. System_profiler errors... I don't know why but you can ignore them.

Your problem is that you need a report user. This is a user with no permissons and you have to add this user to de munkiwebadmin-config.

The benefit is that only your devices can send reports to the webadmin and not everyone.

Documentation coming!

Steve

[Justin Phillips]

Thanks. I added the e new parameters, but now both pre and postflights are giving me:

postflight stdout: Must include 'user' and 'token' parameters with request.

[Steve Küng]

What dose your munkiwebadmin-config look like?
Compare it with the one on github... Maybe there are some variables missing...

--

[Justin Phillips]

Yes, they are the same except for my mwa server address. The reportuser and password were already in the config file. Do I need to create this user somewhere?

[Steve Küng]

Yes you have to create the user in the admin interface.
Login with the admin user in munkiwebadmin -> right upper corner klick on the user icon -> admin
There you can create a user.



Justin Phillips

wuwu...@gmail.com> schrieb am Zi., 24. Feb 2015 um 20:34:

Yes, they are the same except for my mwa server address. The reportuser and password were already in the config file. Do I need to create this user somewhere?

--

You received this message because you are subscribed to a topic in the Google Groups "MunkiWebAdmin" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/munki-web-admin/4FS6U953rcc/unsubscribe.

To unsubscribe from this group and all its topics, send an email to munki-web-admin+unsubscribe@googlegroups.com.

[Justin Phillips]

Alright, there we go. Now I have a computer in the app. Now I just have to figure out why Greg's MWA launchd isn't launching the server on startup.

On Tuesday, February 24, 2015 at 2:39:12 PM UTC-5, Steve Küng wrote:

Yes you have to create the user in the admin interface.
Login with the admin user in munkiwebadmin -> right upper corner klick on the user icon -> admin
There you can create a user.



Justin Phillips
wuwu...@gmail.com> schrieb am Zi., 24. Feb 2015 um 20:34:

Yes, they are the same except for my mwa server address. The reportuser and password were already in the config file. Do I need to create this user somewhere?

--
You received this message because you are subscribed to a topic in the Google Groups "MunkiWebAdmin" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/munki-web-admin/4FS6U953rcc/unsubscribe.

To unsubscribe from this group and all its topics, send an email to munki-web-adm...@googlegroups.com.

[Steve Küng]

Try to change runwsgiserver to runserver in the launchd

[Steve Küng]

and change host and port

so it should look like this:

<array>
        <string>/Users/Shared/munkiwebadmin_env/bin/python</string>
        <string>/Users/Shared/munkiwebadmin_env/munkiwebadmin/manage.py</string>
        <string>runserver</string>
        <string>0.0.0.0:8000</string>
    </array>

To unsubscribe from this group and all its topics, send an email to munki-web-admin+unsubscribe@googlegroups.com.

[Justin Phillips]

Brilliant. You've been a huge help. Thanks

[Justin Phillips]

Steve, I'm going to bother you one more time: I instituted the license tracking feature and every client is reporting this error (though some clients might just have 1 app listed, or just 2. Some all tracked apps):

Error from http://<mwa server>:8000/licenses/available/?name=Compressor&name=Logic+Pro+X&name=Motion: HTTP result 500: internal server error

If I try to go to <mwa server>:8000/licenses/available/, I get this error:

TypeError at /licenses/available/

__init__() got an unexpected keyword argument 'mimetype'

Request Method:	GET
Request URL:	http://<mwa server>:8000/licenses/available/
Django Version:	1.7.2
Exception Type:	TypeError
Exception Value:

__init__() got an unexpected keyword argument 'mimetype'

Exception Location:	/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/http/response.py in __init__, line 318
Python Executable:	/Users/Shared/munkiwebadmin_env/bin/python
Python Version:	2.7.5
Python Path:	['/Users/Shared/munkiwebadmin_env/munkiwebadmin', '/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/virtualenv-12.0.7-py2.7.egg', '/Users/Shared/munkiwebadmin_env/lib/python27.zip', '/Users/Shared/munkiwebadmin_env/lib/python2.7', '/Users/Shared/munkiwebadmin_env/lib/python2.7/plat-darwin', '/Users/Shared/munkiwebadmin_env/lib/python2.7/plat-mac', '/Users/Shared/munkiwebadmin_env/lib/python2.7/plat-mac/lib-scriptpackages', '/Users/Shared/munkiwebadmin_env/Extras/lib/python', '/Users/Shared/munkiwebadmin_env/lib/python2.7/lib-tk', '/Users/Shared/munkiwebadmin_env/lib/python2.7/lib-old', '/Users/Shared/munkiwebadmin_env/lib/python2.7/lib-dynload', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/plat-darwin', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/lib-tk', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/plat-mac', '/System/Library/Frameworks/Python.framework/Versions/2.7/lib/python2.7/plat-mac/lib-scriptpackages', '/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages']
Server time:	Fri, 27 Feb 2015 08:24:00 -0500

[Justin Phillips]

Oh, also on that page is this. Apache's application/xml is not commented out in mime.types

Traceback:

File "/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/core/handlers/base.py" in get_response

  111.                     response = wrapped_callback(request, *callback_args, **callback_kwargs)

File "/Users/Shared/munkiwebadmin_env/munkiwebadmin/licenses/views.py" in available

  57.                             mimetype='application/xml')

File "/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/http/response.py" in __init__

  318.         super(HttpResponse, self).__init__(*args, **kwargs)

Exception Type: TypeError at /licenses/available/

[Steve Küng]

I found the problem and fixed it.

use the newest version.

Steve

[Justin Phillips]

It is working great now. Thanks again.

[Bjørn Bergli Fodstad]

Hi

I have been using Greg's munkiwebadmin for some time, and is very pleased with it.

I would like to try Steve's version, but I have some problems getting it to work on RHEL 6.6.

I used https://code.google.com/p/munki/wiki/MunkiWebAdminLinuxSetup for my existing setup, but is unable to setup a new enviroment for the new installation. I have compiled mod_wsgi for python2.7 but is not able to get it running. I suspect I have some path problems, but I'am not sure.

Have anybody been able to get it working in rhel/centos 6 ?

-Bjørn

[Steve Küng]

Hi Bjørn

I'm also using RHEL 6.6 as production server.

I had problems with Python2.7 on this OS so I used Django 1.6.9. The webadmin works fine with this Django version.

If you are using MunkiWebadminLinuxSetup you need to change the following line in the munkiwebadmin.wsgi:

sys.path.append(os.path.join(MUNKIWEBADMIN_ENV_DIR, 'munkiwebadmin'))

to

sys.path.append(os.path.join(MUNKIWEBADMIN_ENV_DIR, 'munkiwebadmin/munkiwebadmin'))

I hope this helps you.

Regards,

Steve

[Bjørn Bergli Fodstad]

It starts fine with python manage.py runserver 0.0.0.0:8000, but I'm not able to start the wsgi script.

I got a lot of this messages in apache error log

[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]     self.load_middleware()
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]   File "/usr/local/munkiwebadmin_env/lib/python2.6/site-packages/django/core/handlers/base.py", line 44, in load_middleware
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]     for middleware_path in settings.MIDDLEWARE_CLASSES:
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]   File "/usr/local/munkiwebadmin_env/lib/python2.6/site-packages/django/conf/__init__.py", line 54, in __getattr__
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]     self._setup(name)
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]   File "/usr/local/munkiwebadmin_env/lib/python2.6/site-packages/django/conf/__init__.py", line 49, in _setup
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]     self._wrapped = Settings(settings_module)
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]   File "/usr/local/munkiwebadmin_env/lib/python2.6/site-packages/django/conf/__init__.py", line 132, in __init__
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf]     % (self.SETTINGS_MODULE, e)
[Tue Apr 07 16:28:49 2015] [error] [client 2001:700:700:2:654a:ce6c:5321:bdcf] ImportError: Could not import settings 'settings' (Is it on sys.path? Is there an import error in the settings file?): No module named settings

My wsgi script

import os
import site
import sys


# Remember original sys.path.
prev_sys_path = list(sys.path)


# we add currently directory to path and change to it
pwd = os.path.dirname(os.path.abspath(__file__))
os.chdir(pwd)
sys.path = [pwd] + sys.path
sys.path = [os.path.join(pwd, 'munkiwebadmin,munkiwebadmin')] + sys.path


# find the site-packages within the local virtualenv
for python_dir in os.listdir('lib'):
    site_packages_dir = os.path.join('lib', python_dir, 'site-packages')
    if os.path.exists(site_packages_dir):
        site.addsitedir(os.path.abspath(site_packages_dir))


# Reorder sys.path so new directories at the front.
new_sys_path = []
for item in list(sys.path):
    if item not in prev_sys_path:
        new_sys_path.append(item)
        sys.path.remove(item)
sys.path[:0] = new_sys_path


# now start django
from django.core.handlers.wsgi import WSGIHandler
os.environ['DJANGO_SETTINGS_MODULE'] = 'settings'
application = WSGIHandler()

my virtual host 

# webadmin.munki.hioa.no HTTPS Virtual Host
<VirtualHost *:443>
 # General
 ServerAdmin bjornb@hioa.no
 ServerName *.munki.hioa.no
 ServerAlias webadmin.munki.hioa.no


 # Logging
 ErrorLog logs/webadmin_ssl_error_log
 TransferLog logs/webadmin_ssl_access_log
 CustomLog logs/webadmin_ssl_request_log \
 "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
 LogLevel warn


 # SSL Engine
 SSLEngine on


 # SSL Protocol
 SSLProtocol All -SSLv2 -SSLv3


 # SSL Cipher Suite
 SSLHonorCipherOrder On
 SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"


 # Certificate Chain
 SSLCertificateChainFile /etc/pki/tls/certs/chain-munki.hioa.no.pem


 # Server Certificate
 SSLCertificateFile /etc/pki/tls/certs/munki.hioa.no.pem


 # Server Private Key
 SSLCertificateKeyFile /etc/pki/tls/certs/munki.hioa.no.key


 # SSL Engine Options
  <Files ~ "\.(cgi|shtml|phtml|php3?)$">
    SSLOptions +StdEnvVars
  </Files>
 WSGIScriptAlias / /usr/local/munkiwebadmin_env/munkiwebadmin.wsgi
 WSGIDaemonProcess munkiwebadmin user=munkiwebadmin group=munki
 Alias /static/ /usr/local/munkiwebadmin_env/munkiwebadmin/munkiwebadmin/static/
 <Directory /usr/local/munkiwebadmin_env>
       WSGIProcessGroup munkiwebadmin
       WSGIApplicationGroup %{GLOBAL}
       Order deny,allow
       Allow from all
 </Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown owngrade-1.0 force-response-1.0
</VirtualHost>

- Bjorn

[Steve Küng]

add "Alias /media/ /munkirepo/icons/" to your virtual host

change:

sys.path = [os.path.join(pwd, 'munkiwebadmin,munkiwebadmin')] + sys.path

to:

sys.path = [os.path.join(pwd, 'munkiwebadmin')] + sys.path

and

os.environ['DJANGO_SETTINGS_MODULE'] = 'settings'

to:

os.environ['DJANGO_SETTINGS_MODULE'] = 'munkiwebadmin.settings'

...

[Jeremy Larose]

I've been using your new MunkiWebAdmin and it has been working great, all except for when clicking on any client and going into the detail view, it keeps spinning and the following error is presented to the server....

Internal Server Error: /update/detailpkg/C07J100NDJD3/machine-mmm11

Traceback (most recent call last):

  File "/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/core/handlers/base.py", line 111, in get_response

    response = wrapped_callback(request, *callback_args, **callback_kwargs)

  File "/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 22, in _wrapped_view

    return view_func(request, *args, **kwargs)

  File "/Users/Shared/munkiwebadmin_env/lib/python2.7/site-packages/django/contrib/auth/decorators.py", line 22, in _wrapped_view

    return view_func(request, *args, **kwargs)

  File "/Users/Shared/munkiwebadmin_env/munkiwebadmin/munkiwebadmin/reports/views.py", line 466, in detail_pkg

    for index, item in enumerate(sorted_Manifests[manifests][installsType]):

KeyError: 'managed_installs'

Any idea what that is referring to?  It does it for every manifest.  I've even tried removing any empty keys (managed_installs) but the error is still there.  Thanks.

[Steve Küng]

can you send me one of your manifests? Is there something spezial?

--

[Jeremy Larose]

Thanks for the quick response.. nothing special with my manifests.  Here's one I created using your new munkiwebadmin interface:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>catalogs</key>

<array>

<string>production</string>

</array>

<key>included_manifests</key>

<array>

<string>group-organization</string>

<string>group-faculty_staff</string>

<string>group-lab</string>

<string>group-macbook</string>

</array>

<key>managed_installs</key>

<array>

</array>

<key>managed_uninstalls</key>

<array>

</array>

<key>managed_updates</key>

<array>

</array>

<key>optional_installs</key>

<array>

</array>

<key>user</key>

<string></string>

</dict>

</plist>

[Steve Küng]

hmm... witch version of munkiwebadmin are you using? 0.3?

I see you use the hostname as manifests. what happen if you delete a manifest from one machine.

Then open the machine klick the "Software" tab, add an catalog, add some included manifests or what ever  and save it. Same error?

Regards,

Steve

[Jeremy Larose]

yes, using 0.3, the newest you have available.  Deleting the manifest and adding the catalogs and inluded manifests within the software page as you said, fixes this.  So this is because my manifests are the same as hostnames?  I notice the only difference with the actual manifest plist is no more "user" key.

[Steve Küng]

Okey
If there is no manifest with the hostname munkiwebadmin will create one. If there is one munkiwebadmin should use this...

What if you delete the user key?

[Jeremy Larose]

Thanks, the issue was, the manifests need in entry for managed_installs, managed_uninstalls, and optional_installs even if they are empty.  Also, any included manifests need entries for those as well.