windows winrm: cannot install using internal install method

[sparrc]

When installing a windows service via WinRM (via ansible), we get an error saying that "The service process could not connect to the service controller."

This was originally reported in Telegraf: influxdata/telegraf#1760

and here is the issue text:

System info:

Win2012R2

Steps to reproduce:

Running in powershell/console works OK (both interactive and installing the service)
Deploying via winrm (ansible) on the same box rc:0, no stdout or stderr output + eventlog error.

1. execute telegraf.exe via ansible's raw module (powershell via winrm)
2. check output (rc:0, no err/stdout) + eventID3 in eventlog

Expected behavior:

installing/running telegraf
rc:0, stderr NOT "" and/or stdout NOT "" and no eventID

Actual behavior:

"rc": 0, "stderr": "", "stdout": "", "stdout_lines": [] + eventID:3 "The service process could not connect to the service controller."

Use case:

testing telegraf on windows works fine, mass-deploying it using ansible (or any other deployment method that uses winrm) doesn't, and this is a blocker for using telegraf on windows.

[kardianos]

Does winrm and Ansible have full admin rights? It sounds like a fine grain
permission problem to me.

On Wed, Sep 14, 2016, 02:57 Cameron Sparr [email protected] wrote:

When installing a windows service via WinRM (via ansible), we get an error
saying that "The service process could not connect to the service
controller."

This was originally reported in Telegraf: influxdata/telegraf#1760
influxdata/telegraf#1760

and here is the issue text:
System info:

Win2012R2
Steps to reproduce:

Running in powershell/console works OK (both interactive and installing
the service)
Deploying via winrm (ansible) on the same box rc:0, no stdout or stderr
output + eventlog error.

1. execute telegraf.exe via ansible's raw module (powershell via winrm)
2. check output (rc:0, no err/stdout) + eventID3 in eventlog

Expected behavior:

installing/running telegraf
rc:0, stderr NOT "" and/or stdout NOT "" and no eventID
Actual behavior:

"rc": 0, "stderr": "", "stdout": "", "stdout_lines": [] + eventID:3 "The
service process could not connect to the service controller."
Use case:

testing telegraf on windows works fine, mass-deploying it using ansible
(or any other deployment method that uses winrm) doesn't, and this is a
blocker for using telegraf on windows.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#72, or mute the thread
https://github.com/notifications/unsubscribe-auth/AAuFsdkS_W99BFqbVWujS_sb-lpKkFATks5qp8UYgaJpZM4J8mNC
.

[sparrc]

That's a good question, @one1zero1one any idea if this could just be a permissions issue?

I'm not very familiar with the stack, but maybe there is a way to give ansible heightened permissions for this operation.

[one1zero1one]

Ansible connects to the host via winrm - with the same user (local admin). No issues otherwise, session is running elevated:

EXEC ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")
WINRM RESULT u' Response code 0, out "True\r\n", err ""'

however when running telegraf:

EXEC CMD /C "c:/telegraf/telegraf.exe -config c:/telegraf/telegraf.conf -service install"
WINRM RESULT u'Response code 0, out "", err ""'

no out, no err, just the eventID 3 in eventlog.

[kardianos]

@one1zero1one Please try to install telegraf.exe by using the windows provided tool "sc.exe" under winrm. If sc works and the internal install fails, then it is a service package problem.

Having the windows role Administrator does not guarantee the appropriate rights.

[one1zero1one]

@kardianos thanks for the suggestion, sc.exe seems to do the job, both in console and under winrm. Internal install works only from console, fails from winrm.

[kardianos]

@one1zero1one Feel free to use sc.exe for now to install telegraf in your deployments. I'll need to examine what can be done differently for both methods to work.

[peter-murray]

influxdata/telegraf#1760 (comment)