ylianst / meshcentral Goto Github PK

Hi, I've got similar problem like issue number #13 . I have two windows 7 64bits sp1 PC´s with the same hardware ( Intel NUC DE3815TYKHE). The Mesh Central server version is 0.2.3-d.
I run meshagent and click on connect, when I click on the computer device in the mesh list, viewing the details of the Windows computer, my menu options in the menu bar at the top of the screen are:
General Events Console
I try remote reset cliking on "Actions" reset but remote PC doesn´t reset.
Here a printscreen of Console tap:

Need RDP to work on reverse proxy

whenever I install via NPM meshcentral I always have this error that I do not see in the video

npm WARN deprecated [email protected]: please upgrade to graceful-fs 4 for compatibility with current and futur versions of node.js

Is this normal?

The problem resolves with an "npm update" after installation

Hi，
Can mechcentral define password complexity requirements when creating users，some customers have such requirements based on information security.

Best regards.
Billy.adu

One of my main problems with MeshCentral right now is that when you use it behind a reverse proxy, agents are unable to connect to the server unless MeshCentral's webserver certificate is identical to the one you're using in your reverse proxy setup. This is true regardless of whether you use the --notls flag (which shouldn't be using any certificates in the first place) or the --tlsoffload flag (which should have the option to disable it).

The primary downside of this is that you need to manually copy the certificate from your reverse proxy to your MeshCentral host every time it expires which can be bothersome when you use certificates with a short lifetime like the ones from LetsEncrypt or when the reverse proxy is running on another host. Since MeshCentral currently doesn't support ECDSA certificates, it also limits the type of certificate you can use in your reverse proxy. This is mainly a problem when you use a wildcard certificate instead of individual certificates for each of your self-hosted applications since it forces you to use an RSA certificate for all of them.

My experience with virtually every other self-hosted web applications I've used has been that the connection between the reverse proxy and the application is using HTTP by default and that the use of HTTPS has to be explicitly enabled in the options menu with manually supplied certificates.

I don't think you necessarily need to change MeshCentral to use HTTP by default, but I do think that there should be an option to disable certificate validation in the config file so that people can simplify their certificate management process. Those who want the additional security of a HTTPS connection between the reverse proxy and the application would not have to change their setup this way.

Edit: Minor phrasing changes.

I can make a token with '--logintoken' and extract the token key with '--logintokenkey'.

But how do I use the key to create a valid token, do I have to implement 'encodeCookie' method on the business server?

Would be nice if I could just make a REST call from the business server to MeshCentral to get a token:
?user=admin&password=1234

Again error with SelfUpgrade

{ Error: Command failed: /usr/bin/node /opt/meshcentral/node_modules/meshcentral/meshcentral.js --launch
sh: 0: getcwd() failed: No such file or directory
path.js:1167
          cwd = process.cwd();
                        ^

Error: ENOENT: no such file or directory, uv_cwd
    at Object.resolve (path.js:1167:25)
    at Function.Module._resolveLookupPaths (module.js:424:17)
    at Function.Module._resolveFilename (module.js:541:20)
    at Function.Module._load (module.js:474:25)
    at Module.require (module.js:596:17)
    at require (internal/module.js:11:18)
    at getConfig (/opt/meshcentral/node_modules/meshcentral/meshcentral.js:1088:5)
    at /opt/meshcentral/node_modules/meshcentral/meshcentral.js:1123:22
    at InstallModules (/opt/meshcentral/node_modules/meshcentral/meshcentral.js:1094:103)
    at InstallModule (/opt/meshcentral/node_modules/meshcentral/meshcentral.js:1112:5)

    at ChildProcess.exithandler (child_process.js:275:12)
    at emitTwo (events.js:131:20)
    at ChildProcess.emit (events.js:214:7)
    at maybeClose (internal/child_process.js:925:16)
    at Socket.stream.socket.on (internal/child_process.js:346:11)
    at emitOne (events.js:116:13)
    at Socket.emit (events.js:211:7)
    at Pipe._handle.close [as _onclose] (net.js:567:12)
  killed: false,
  code: 1,
  signal: null,
  cmd: '/usr/bin/node /opt/meshcentral/node_modules/meshcentral/meshcentral.js --launch' }
ERROR: MeshCentral failed with critical error, check MeshErrors.txt. Restarting in 5 seconds...

After CTRL-C and try launch meshcentral

root@HOSTNAME:/opt/meshcentral/node_modules/meshcentral# node meshcentral.js
path.js:1167
          cwd = process.cwd();
                        ^

Error: ENOENT: no such file or directory, uv_cwd
    at Object.resolve (path.js:1167:25)
    at startup (bootstrap_node.js:169:32)
    at bootstrap_node.js:609:3

After Npm Update and try again launch is ok

This is a feature request.

I'd really like to be able to use a one-click RDP session from Linux to manage remote devices.

One may use https://github.com/rdesktop/rdesktop for this and pass the needed credentials via CLI options, but that could be unsafe.

I opened rdesktop/rdesktop#254 asking to implement the rdp:// URI scheme.

I was wondering if there's a way to set quality value above 50% ...
thanks

(BTW keep up the good work!)

Is it possible to jump from a Web browser to a specific url address on a remotely supported desktop?

When using meshcentral from an Android mobile the connection works well but as it is necessary to write in a box or text box the mobile keyboard does not unfold and it is not possible to right click to display menu.

This software is great. I am just getting started and have created a mesh with two devices. Both devices are very similar; Windows 10 - 64bit, etc. Both devices connect and display: My Devices / My Account / My Events / General, but one of them does not display the Desktop / Terminal / Files / Events / Console options. I can't figure out what option on that device is turned on or off that may be causing this to happen. Any suggestions? TIA!

Installed via npm on Ubuntu Server 16.04 I get following error:

MeshCentral HTTP redirection web server running on port 81.
{ [Error: Command failed: /bin/sh -c /usr/bin/nodejs ..../meshcentral/node_modules/meshcentral/meshcentral --launch
..../meshcentral/node_modules/meshcentral/exeHandler.js:257
        if (options.peinfo.CertificateTableAddress != 0) { options.state.endIndex = options.peinfo.CertificateTableAddress; }
                          ^

TypeError: Cannot read property 'CertificateTableAddress' of undefined
    at Object.module.exports.hashExecutableFile (..../meshcentral/node_modules/meshcentral/exeHandler.js:257:27)
    at Object.CreateMeshCentralServer.obj.updateMeshAgentsTable (..../meshcentral/node_modules/meshcentral/meshcentral.js:988:32)
    at Object.CreateMeshCentralServer.obj.StartEx3 (..../meshcentral/node_modules/meshcentral/meshcentral.js:407:13)
    at ..../meshcentral/node_modules/meshcentral/meshcentral.js:376:21
    at Object.obj.GetMeshServerCertificate (..../meshcentral/node_modules/meshcentral/certoperations.js:292:89)
    at CreateMeshCentralServer.obj.StartEx2 (..../meshcentral/node_modules/meshcentral/meshcentral.js:374:35)
    at Server.<anonymous> (..../meshcentral/node_modules/meshcentral/redirserver.js:99:13)
    at Server.g (events.js:260:16)
    at emitNone (events.js:67:13)
    at Server.emit (events.js:166:7)
]
  killed: false,
  code: 1,
  signal: null,
  cmd: '/bin/sh -c /usr/bin/nodejs ..../node_modules/meshcentral/meshcentral --launch' }
ERROR: MeshCentral failed with critical error, check MeshErrors.txt. Restarting in 5 seconds...

Hi, I try install mesh agent into a ubuntu 18.04 folowing this steps:
1.- wget -q https://FQDN:444/meshagents?script=1 --no-check-certificate -O ./meshinstall.sh
2.- sudo chmod 755 ./meshinstall.sh
3.- sudo ./meshinstall.sh https://FQDN:444 'id_string'
In the last step the following error is shown:
Downloading Mesh agent #6...
Mesh agent downloaded.
Unable to download mesh settings at: https://FQDN:444/meshsettings?id=id_string.
Do I need to open some port in the router for the linux agent?
MeshCentral is listening at 444.
Thanks

Hello,
after installing Meshcentral2 and creating the first user with administrative rights it is impossible to create a new user. There seems to be a problem with the "meshuser.js" script at line 369

we have this error after trying to create a new user

/root/meshcentral/node_modules/meshcentral/meshuser.js:369
                            obj.parent.hash(command.pass, function (err, salt, hash) {
                                       ^

TypeError: obj.parent.hash is not a function
    at WebSocket.<anonymous> (/root/meshcentral/node_modules/meshcentral/meshuser.js:369:40)
    at emitTwo (events.js:126:13)
    at WebSocket.emit (events.js:214:7)
    at Receiver.ontext (/root/meshcentral/node_modules/express-ws/node_modules/ws/lib/WebSocket.js:841:10)
    at /root/meshcentral/node_modules/express-ws/node_modules/ws/lib/Receiver.js:536:18
    at /root/meshcentral/node_modules/express-ws/node_modules/ws/lib/Receiver.js:368:7
    at /root/meshcentral/node_modules/express-ws/node_modules/ws/lib/PerMessageDeflate.js:249:5
    at afterWrite (_stream_writable.js:454:3)
    at onwrite (_stream_writable.js:445:7)
    at InflateRaw.afterTransform (_stream_transform.js:90:3)

Like in the topic, no matter if it is windows 7 or 10, when connecting into terminal and typing, letters are not visible until Enter hit. Even when using "Paste" option, the things are not visible until Enter.

Also there is problem with listing files in folder. Dir command do not show .exe files. Like on the screenshot.

Add username logged in, and IP of remote machine in various views to be able to see if someone is logged in and where. Useful when X Person says "i'm logged in upstairs" we can search for their username and know which machine they are using. Blank if nobody logged in

after an attempt to update my meshcentral server this one to the following errors:

path.js:1177
          cwd = process.cwd();
                        ^

Error: ENOENT: no such file or directory, uv_cwd
    at Object.resolve (path.js:1177:25)
    at Function.Module._resolveLookupPaths (module.js:418:17)
    at Function.Module._resolveFilename (module.js:532:20)
    at Function.Module._load (module.js:468:25)
    at Module.require (module.js:587:17)
    at require (internal/module.js:11:18)
    at getConfig (/root/meshcentral/node_modules/meshcentral/meshcentral.js:1055:5)
    at /root/meshcentral/node_modules/meshcentral/meshcentral.js:1089:18
    at InstallModules (/root/meshcentral/node_modules/meshcentral/meshcentral.js:1061:103)
    at InstallModule (/root/meshcentral/node_modules/meshcentral/meshcentral.js:1079:5)

When using the remote desktop the hash key(#) does not work.

1. Can I transfer folders from a remote desktop?

2. Is it possible to paste the copy from the admin screen onto the remote desktop screen?

Can timeout be set when meshcentral server connect to IPC by intel AMT ? We want to be able to connect continuously. Thanks sou much.

billy.adu

Hi, I´m traying to connecto to linux ubuntu 18 desktop but black screen showed clicking on connect.

All win7 clients offline after update server version to 0.2.4-h. Windows 10 clients are online.

Hello @Ylianst ,
I was woundering if there is possibility to translate to another language all Meshcentral staff (clients, interface, mails templates, etc) and maintain the translation even after updates/upgrades. I have it running on Debian. I checked a tool in http://www.meshcommander.com/translator but,be honest, didn't understand what it does.
Thank you!

hello,

is there a way to put a location devices that use only INTEL AMT to see them in the map?

Using MeshCentral 2.0 beta 2 connect using CIRA to an Intel-AMT device

Using the MeshCommander KVM it prodivdes the power option to "Power on to IDE-R", but it then asks for a server URL. I assumed MeshCentral would provide the server so I switched to that.

Using the MeshCentral KVM there are far fewer power options. I'm not even given the option to "Power on". But if I use the "Intel AMT" tab and click on the power status, then choose "Custom action.." I can select "Use IDE-R" and the "IDE-R boot device". However, there's no where I can specify the ISO to use.

Is this functionality not there yet or am I missing something?

Thanks for your great work.

When i try to generate an LE certificate i get an error in the logs:

Error: options.newRegUrl must be the a new registration url

No certificate is generated.

At some point during the past two weeks, the agent control features of MeshCentral stopped working for me. Whenever I click on the "Connect" button on the "Desktop", "Terminal" or "Files" tab, the connection gets stuck on "Setup..." indefinitely. I'm positive that it's not related to any change that was made in MeshCentral because I tried rolling back to the previous 10 versions (all of which had previously been working fine) and reinstalled MeshAgent and MeshCentral from scratch with no success.

MeshAgent is installed on a Windows 10 machine with the latest updates installed. I've tried disabling the firewall and anti-virus software and uninstalling recent Windows updates, but it didn't solve the issue for me.

The "Console" tab in MeshCentral only shows this output:

New tunnel connection #1: wss://my.domain.tld:443/meshrelay.ashx?id=<random string>, rights: 4294967295

Has anyone else experienced this issue? Any ideas on how to fix it?

Edit: Added more information.

Hi, I have some issues with installing Letsencrypt certificates.ERROR: Unable to setup GreenLock module. aapears. Folder letsencrypt is created, but no certs are installed.

This is my letsencrypt config file part

"letsencrypt": {
"email": "[email protected]",
"names": "mydomain.com",
"rsaKeySize": 3072,
"production": false
},

This is what log file says on tarting the service.
-- The start-up result is done.
Dec 05 15:18:02 subdomain.mydomain.com polkitd[1669]: Unregistered Authentication Agent for unix-process:6210:200860242 (sy
Dec 05 15:18:03 subdomain.mydomain.com meshstart.sh[6216]: Installing greenlock...
Dec 05 15:18:12 subdomain.mydomain.com meshstart.sh[6216]: Installing le-store-certbot...
Dec 05 15:18:15 subdomain.mydomain.com meshstart.sh[6216]: Installing le-acme-core...
Dec 05 15:18:23 subdomain.mydomain.com meshstart.sh[6216]: Installing le-store-certbot...
Dec 05 15:18:26 subdomain.mydomain.com meshstart.sh[6216]: MeshCentral HTTP redirection web server running on port 80.
Dec 05 15:18:26 subdomain.mydomain.com meshstart.sh[6216]: ERROR: Unable to setup GreenLock module.
Dec 05 15:18:26 subdomain.mydomain.com meshstart.sh[6216]: MeshCentral Intel(R) AMT server running on subdomain.mydomain.com:
Dec 05 15:18:26 subdomain.mydomain.com meshstart.sh[6216]: MeshCentral HTTPS web server running on subdomain.mydomain.com:443

GreenLog is installed.

[root@myhost meshcentral-data]# npm list | grep green
+-T [email protected]

-------- 12/5/2018, 3:35:51 PM ---- 0.2.2-t --------

TypeError: util.promisify is not a function
at Object. (/opt/meshcentral/node_modules/le-store-certbot/index.js:18:24)
at Module._compile (module.js:577:32)
at Object.Module._extensions..js (module.js:586:10)
at Module.load (module.js:494:32)
at tryModuleLoad (module.js:453:12)
at Function.Module._load (module.js:445:3)
at Module.require (module.js:504:17)
at require (internal/module.js:20:19)
at Object.module.exports.CreateLetsEncrypt (/opt/meshcentral/node_modules/meshcentral/letsencrypt.js:34:51)
at /opt/meshcentral/node_modules/meshcentral/meshcentral.js:390:38
at Object.obj.GetMeshServerCertificate (/opt/meshcentral/node_modules/meshcentral/certoperations.js:263:43)
at CreateMeshCentralServer.obj.StartEx2 (/opt/meshcentral/node_modules/meshcentral/meshcentral.js:385:35)
at Server. (/opt/meshcentral/node_modules/meshcentral/redirserver.js:108:13)
at Server.g (events.js:292:16)
at emitNone (events.js:86:13)
at Server.emit (events.js:185:7)

OS is CentOS 7 with latest patches.

I can't see mouse pointer of remote side. Do you have any plan to solve these issue?

Currently, email address validation supports 2-4 character TLDs (.us, .biz, etc.). Given the proliferation of longer TLDs, we should update this.

I can submit a PR which would remove the upper limit on length, but do we also want to allow international addresses at this time?

Hi @Ylianst,
thank you for your software, it's great.
I was wondering if there would be possibilities to run an agent on remote PC without admin permissions?

Thank you.

MeshCentral currently throws an exception and says that it only supports RSA when you replace the automatically generated certificate with an ECDSA certificate (e.g. when using MeshCentral in TLS Offloading mode).

There's something wrong with clickonce functions. I can't use RDP, SSH or SCP.

I need to find some kind of RDP working on Windows CE and Windows 7. MeshCentral can work with CE and 7 or only standard Windows?

I'm currently running all of my web-facing applications behind a reverse proxy in separate Docker containers; it would be awesome if you could release an official Docker image for MeshCentral on the Docker Hub so that people like me can seamlessly integrate the software into their existing setup.

What are you doing?

sending [Windows key] or combination of keys like [Windows + R] CIRA-KVM remote desktop

What is happening?

Keys are not being sent or the complementary key r keeps pressed in remote machine.

What do you expect to happen?

Capture correctly the mentioned keys and send it to remote machine.
It would be nice to understand how this signals are sent, those have to be mapped In amt script?.

When supporting environments where there are multiple users logged into a single device (servers and terminal services sessions) It would be useful to be able to select the session ID based on ID and/or username that I would like to shadow using Desktop.

Just perform a MeshCentral 2 installation on a vps, everything works fine with windows 10 computers.
But I have the need to add 3 computers with windows 7 and 1 with windows XP.

On computers with windows 7 the installation is apparently complete but the device is not added in the mesh view, even the service is running but it does not work.
When you open the mesh agent installer again in Current Agent Status it is displayed as Not Installed.
Test only with the Connect option but it did not work either.

In Windows XP when trying to run MeshAgent the system presents a message: "This application is not compatible with the 32 Bit system" and the downloaded MeshAgent is the corresponding 32 bits.

It would be helpful to have the ability to blank out the client screen on demand in case you don't want anyone near the client machine to see what you are doing (from a security perspective).

OS: Centos 7.5
node v: 10.14.1
MeshCentral: v0.2.4-e

Added an IP address to UserAllowedIP and it appeared to be working since when trying to access from another IP, got "Unauthorized"
However once logged in with an allowed IP, node throws the following error and the page keeps reloading and eventually says server disconnected:

TypeError: Cannot read property 'startsWith' of undefined at checkUserIpAddressEx (/meshcentral/node_modules/meshcentral/webserver.js:285:20) at checkUserIpAddress (/meshcentral/node_modules/meshcentral/webserver.js:297:17) at PerformWSSessionAuth (/meshcentral/node_modules/meshcentral/webserver.js:1886:26) at /meshcentral/node_modules/meshcentral/webserver.js:1846:63 at /meshcentral/node_modules/express-ws/lib/wrap-middleware.js:13:9 at Layer.handle [as handle_request] (/meshcentral/node_modules/express/lib/router/layer.js:95:5) at next (/meshcentral/node_modules/express/lib/router/route.js:137:13) at Route.dispatch (/meshcentral/node_modules/express/lib/router/route.js:112:3) at Layer.handle [as handle_request] (/meshcentral/node_modules/express/lib/router/layer.js:95:5) at /meshcentral/node_modules/express/lib/router/index.js:281:22 at Function.process_params (/meshcentral/node_modules/express/lib/router/index.js:335:12) at next (/meshcentral/node_modules/express/lib/router/index.js:275:10) at /meshcentral/node_modules/meshcentral/webserver.js:1812:20 at Layer.handle [as handle_request] (/meshcentral/node_modules/express/lib/router/layer.js:95:5) at trim_prefix (/meshcentral/node_modules/express/lib/router/index.js:317:13) at /meshcentral/node_modules/express/lib/router/index.js:284:7

My Windows 10 client is showing as offline in MeshCentral after I upgraded to the latest version. The log shows that there's suddenly a certificate mismatch between the agent and the server even though the certificate hasn't changed. I have reinstalled the MeshAgent and MeshCentral server from scratch but the error always shows up in the logs again.

I'm currently using MeshCentral behind a reverse proxy with the "--notls" flag. When I run MeshCentral that way, my agents can't connect to the server until I manually change the protocol in the MeshAgent.msh file from ws:// to wss://. This problem can be avoided by using the "--tlsoffload" flag instead, but that comes with its own drawbacks.

While my agents are able to connect to the server without any issues when using the "--tlsoffload" flag, I am unable to log into the MeshCentral site itself. When I enter my credentials and press Enter, the site simply reloads instead of logging me in. A workaround is to specify the user at runtime, but the obvious security implications prevent me from using it.

We are Using Meshcentral primarily for managing AMT-Devices.
Since some Versions, if I remember correctly Version 0.1.2 before the Mesh Agent Integration, it is not possible to establish a connection to powered off Devices. Is this designed as wanted?
As it was in the beginning, we could always Hit Connect and Meshcentral would try to establish a connection to a designated Device.
To regain this feature would be quite awesome.

Best regards,
Narwahls

After install client agent on ubuntu 18.04.1 64bits deskttop tab was missing.

Not able to "shadow" the console/RDP user that is logged into the endpoint that you are attempting to connect to. For supporting endpoints/users this is critical.

I just install a meshcentral2 server .
here is the server info

install and start meshagent service in client

But I can not find any agent in "my devices"
both server and client were reboot

any suggestions ? I see no log in client , and no error log in server

Need to be able to copy text to and from the client for executing large commands remotely

Consider setup a drop down box that allows a person to select device groups individually to limit the number of systems displayed. Drop box could have (All, DeviceGroup1, DeviceGroup2, etc) and only display those systems in that group.

Alternatively, you could click on a device group to only see those systems
Alternatively you could simply expand and collapse the groups you didn't want to see with a +/- button
Alternatively you could autotag devices with the device group name then filter by tag (devicegroupname)