Unable to install

[adamstadnick]

Tested on Server 2016 and it worked, went into a second domain and installers run but fail to create the service. Application throws error code 100 in Windows event logs and references that it is unable to bind the local port.

I have verified that nothing else is listening on port 5999 but still can't get past this issue. Any ideas?

[brockrob]

Interesting. I've got this going on a fair few domain controllers and have never run into this issue. Do you have any security software (antivirus, third party firewall, etc) running on the problem domain controllers? I had to whitelist the service in my antivirus (Crowdstrike) because they, like many others, treat files that aren't very prevalent with more suspicion, which can lead to false positives in cases like this.

I know how it must look to suggest security products may be to blame for stopping some open source thing from running on your domain controllers, so I'd suggest compiling yourself if you don't trust my binaries (a perfectly sensible position).

[adamstadnick]

We’re using WebRoot SecureAnywhere, but I have the same AV and policies on my test DC and had no issues there. Haven’t seen any alerts or blocks in the monitor either, but I’ll do some testing and see what I can see. I’m curious how you’re creating the service – I don’t have a lot of programming background so the actual code won’t tell me much, but I know that the command in the how-to (sc create OPF binPath= <full path to exe>\opfservice.exe start= boot ) fails if I run it manually on Server 2016. It worked on the other server though. Changing ‘boot’ to ‘demand’ works, though. What’s really weird is this is a new DC, it’s only a few months old. Not like it’s had time to get screwed up. Adam Stadnick [cid:image001.jpg@01CF6ADC.C5BCAE20]<http://totalcareit.com/> phone: 321.259.5500<tel:321.259.5500> e-mail: adam@TotalCareIT.com<mailto:adam@TotalCareIT.com> web: www.TotalCareIT.com<http://www.totalcareit.com/> Think before you print. From: Robert Brock <notifications@github.com> Sent: Wednesday, May 23, 2018 6:58 AM To: brockrob/OpenPasswordFilter <OpenPasswordFilter@noreply.github.com> Cc: Adam Stadnick <adam@TotalCareIT.com>; Author <author@noreply.github.com> Subject: Re: [brockrob/OpenPasswordFilter] Unable to install (#4) Interesting. I've got this going on a fair few domain controllers and have never run into this issue. Do you have any security software (antivirus, third party firewall, etc) running on the problem domain controllers? I had to whitelist the service in my antivirus (Crowdstrike) because they, like many others, treat files that aren't very prevalent with more suspicion, which can lead to false positives in cases like this. I know how it must look to suggest security products may be to blame for stopping some open source thing from running on your domain controllers, so I'd suggest compiling yourself if you don't trust my binaries (a perfectly sensible position). — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<#4 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ARfMuOq8kcxjRE8g7ksOXtbACZNpSaNpks5t1UDEgaJpZM4UHlWU>.

[adamstadnick]

I know this is an old discussion but I did eventually prove that it was our AV blocking the file. No idea why it only did it on one DC but I have it working now using the installer. All is well! The service creation problem was also just a mistake on my end, I had accidentally left services.msc pointed to another server and was trying to create a service that was already registered. Adam Stadnick [cid:image001.jpg@01CF6ADC.C5BCAE20]<http://totalcareit.com/> phone: 321.259.5500<tel:321.259.5500> e-mail: adam@TotalCareIT.com<mailto:adam@TotalCareIT.com> web: www.TotalCareIT.com<http://www.totalcareit.com/> Think before you print. From: Adam Stadnick Sent: Wednesday, May 23, 2018 12:55 PM To: 'brockrob/OpenPasswordFilter' <reply@reply.github.com>; brockrob/OpenPasswordFilter <OpenPasswordFilter@noreply.github.com> Cc: Author <author@noreply.github.com> Subject: RE: [brockrob/OpenPasswordFilter] Unable to install (#4) We’re using WebRoot SecureAnywhere, but I have the same AV and policies on my test DC and had no issues there. Haven’t seen any alerts or blocks in the monitor either, but I’ll do some testing and see what I can see. I’m curious how you’re creating the service – I don’t have a lot of programming background so the actual code won’t tell me much, but I know that the command in the how-to (sc create OPF binPath= <full path to exe>\opfservice.exe start= boot ) fails if I run it manually on Server 2016. It worked on the other server though. Changing ‘boot’ to ‘demand’ works, though. What’s really weird is this is a new DC, it’s only a few months old. Not like it’s had time to get screwed up. Adam Stadnick [cid:image001.jpg@01CF6ADC.C5BCAE20]<http://totalcareit.com/> phone: 321.259.5500<tel:321.259.5500> e-mail: adam@TotalCareIT.com<mailto:adam@TotalCareIT.com> web: www.TotalCareIT.com<http://www.totalcareit.com/> Think before you print. From: Robert Brock <notifications@github.com<mailto:notifications@github.com>> Sent: Wednesday, May 23, 2018 6:58 AM To: brockrob/OpenPasswordFilter <OpenPasswordFilter@noreply.github.com<mailto:OpenPasswordFilter@noreply.github.com>> Cc: Adam Stadnick <adam@TotalCareIT.com<mailto:adam@TotalCareIT.com>>; Author <author@noreply.github.com<mailto:author@noreply.github.com>> Subject: Re: [brockrob/OpenPasswordFilter] Unable to install (#4) Interesting. I've got this going on a fair few domain controllers and have never run into this issue. Do you have any security software (antivirus, third party firewall, etc) running on the problem domain controllers? I had to whitelist the service in my antivirus (Crowdstrike) because they, like many others, treat files that aren't very prevalent with more suspicion, which can lead to false positives in cases like this. I know how it must look to suggest security products may be to blame for stopping some open source thing from running on your domain controllers, so I'd suggest compiling yourself if you don't trust my binaries (a perfectly sensible position). — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<#4 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ARfMuOq8kcxjRE8g7ksOXtbACZNpSaNpks5t1UDEgaJpZM4UHlWU>.

[jtuk]

That sc command needs = boot and = auto on Server 2016. The order matters also. That was the difference for me.

…

On 23 August 2018 at 15:52, adamstadnick ***@***.***> wrote: I know this is an old discussion but I did eventually prove that it was our AV blocking the file. No idea why it only did it on one DC but I have it working now using the installer. All is well! The service creation problem was also just a mistake on my end, I had accidentally left services.msc pointed to another server and was trying to create a service that was already registered. Adam Stadnick ***@***.***<http://totalcareit.com/> phone: 321.259.5500<tel:321.259.5500> e-mail: ***@***.******@***.***> web: www.TotalCareIT.com<http://www.totalcareit.com/> Think before you print. From: Adam Stadnick Sent: Wednesday, May 23, 2018 12:55 PM To: 'brockrob/OpenPasswordFilter' ***@***.***>; brockrob/OpenPasswordFilter ***@***.***> Cc: Author ***@***.***> Subject: RE: [brockrob/OpenPasswordFilter] Unable to install (#4) We’re using WebRoot SecureAnywhere, but I have the same AV and policies on my test DC and had no issues there. Haven’t seen any alerts or blocks in the monitor either, but I’ll do some testing and see what I can see. I’m curious how you’re creating the service – I don’t have a lot of programming background so the actual code won’t tell me much, but I know that the command in the how-to (sc create OPF binPath= <full path to exe>\opfservice.exe start= boot ) fails if I run it manually on Server 2016. It worked on the other server though. Changing ‘boot’ to ‘demand’ works, though. What’s really weird is this is a new DC, it’s only a few months old. Not like it’s had time to get screwed up. Adam Stadnick ***@***.***<http://totalcareit.com/> phone: 321.259.5500<tel:321.259.5500> e-mail: ***@***.******@***.***> web: www.TotalCareIT.com<http://www.totalcareit.com/> Think before you print. From: Robert Brock ***@***.******@***.*** com>> Sent: Wednesday, May 23, 2018 6:58 AM To: brockrob/OpenPasswordFilter ***@***.*** ***@***.***>> Cc: Adam Stadnick ***@***.******@***.***>>; Author ***@***.******@***.***>> Subject: Re: [brockrob/OpenPasswordFilter] Unable to install (#4) Interesting. I've got this going on a fair few domain controllers and have never run into this issue. Do you have any security software (antivirus, third party firewall, etc) running on the problem domain controllers? I had to whitelist the service in my antivirus (Crowdstrike) because they, like many others, treat files that aren't very prevalent with more suspicion, which can lead to false positives in cases like this. I know how it must look to suggest security products may be to blame for stopping some open source thing from running on your domain controllers, so I'd suggest compiling yourself if you don't trust my binaries (a perfectly sensible position). — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub<https://github.com/ brockrob/OpenPasswordFilter#4#issuecomment-391306174>, or mute the thread<https://github.com/notifications/unsubscribe-auth/ ARfMuOq8kcxjRE8g7ksOXtbACZNpSaNpks5t1UDEgaJpZM4UHlWU>. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#4 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AZQXxMaspqnNEVSHC2rxksc1GDjLfWtNks5uTsHEgaJpZM4UHlWU> .