icinga-powershell-framework icon indicating copy to clipboard operation
icinga-powershell-framework copied to clipboard

Permission problems with Windows Server 2025

Open robertkrenn opened this issue 11 months ago • 3 comments

Hi, we use Icinga-for-Windows to montior our hyperv environment. This worked pretty well after installing the jea profile. Last week we updated the scvmm server from 2022 to win 2025, and all plugins failed to check. we already reinstalled icinga-for-windows completely, also updated to the latest beta, but we don't get it to fly under 2025. The documentations says last supported os is win 2022. When will there be an update to fix the permission issues with 2025?

Kind regards

robertkrenn avatar Jan 13 '25 15:01 robertkrenn

Hello,

Thanks for the input. We will check what is going on with Windows 2025. In general it should work just fine.

LordHepipud avatar Jan 24 '25 15:01 LordHepipud

I have run a few tests with Windows 2025 Standard/Datacenter version as well as Headless and Desktop environment. For me Icinga for Windows worked just fine. the installation as well as the execution of plugins worked without problems. JEA also seems to work fine.

Do you have some further examples on what is not working at the moment?

LordHepipud avatar Jan 30 '25 15:01 LordHepipud

Sorry for answering late. We now updated to the regular stable versions as follows: Component Version Available


agent 2.14.5 2.14.5 apichecks 1.2.0 1.2.0 cluster 1.3.0 1.3.0 framework 1.13.2 1.13.2 hyperv 1.3.1 1.3.1 inventory 1.2.0 1.2.0 plugins 1.13.0 1.13.0 restapi 1.2.0 1.2.0 service 1.2.0 1.2.0

The problem is still, that without JEA the most hyperv specific plugins don't get access to the counters and throw permission errors. But since updating to Windows Server 2025 we aren't able to install JEA anymore. Enabling JEA with the icinga for windows framework gets stuck with the following messages:

_> [Warning]: The module "icinga-powershell-plugins" is using "Add-Type" or "Add-IcingaAddTypeLib" definitions for file "C:\Program Files\WindowsPowerShell\Modules\icinga-powershell-plugins\provider\disks\Get-IcingaDiskAttributes.psm1". Ensure you validate the code before trusting this publisher.

[Warning]: The module "icinga-powershell-plugins" is using "Add-Type" or "Add-IcingaAddTypeLib" definitions for file "C:\Program Files\WindowsPowerShell\Modules\icinga-powershell-plugins\provider\disks\Get-IcingaUNCPathSize.psm1". Ensure you validate the code before trusting this publisher._

Also using an elevated Powershell prompt and setting execution policies to by bypass doesn't change the behavior. The JEA installer gets stuck, doesnt finish and we have to abort with ctrl+c

robertkrenn avatar Mar 31 '25 10:03 robertkrenn

Hi

Thank you for the update. Please remove the packages

restapi apichecks

and try again. Those packages should never be used with the latest Icinga for Windows version, as they might cause various issues. Can you please try again once those are gone?

LordHepipud avatar Apr 14 '25 13:04 LordHepipud

Hi, first things first, it's now working like a charme. Many thanks Is this somewhere documented? I didn't find anything about it in the icinga for windows documentation.

Kind regards

robertkrenn avatar Apr 15 '25 09:04 robertkrenn

Hi,

yes, this was mentioned in the upgrading docs a while ago.

We have now removed the Rest-API and Api-Check packages from packages.icinga.com, ensuring that no one will install them anymore, as no longer required.

LordHepipud avatar Apr 17 '25 09:04 LordHepipud