Tag: Computer architecture

Cannot ‘Allow’ Citrix system file extensions when installing CF for Mac

Citrix Leave a comment
Grab a copy of the database

  • The path is: /var/db/SystemPolicyConfiguration/ . See screenshot below and the required files:
  • image.png
  • Check if the kernel extension is allowed as shown below:
  • If it is allowed, then perform the steps highlighted below.

To fix the “Drive Unavailable” error, perform the following steps:

  1. Startup the Mac in recovery mode .
  2. Click the Utilities menu and select Terminal.
  3. Enter the following command:
    • /usr/sbin/spctl kext-consent add TEAMID
  4. Press Enter
    • Example: For Citrix the command would be: /usr/sbin/spctl kext-consent add S272Y5R93J
  5. Close the Terminal app and restart

If issue persists, Trigger the prompt by loading the kernel extension manually

sudo kextutil -t /Library/Filesystems/ctxfuse.fs/Contents/Extensions/10.12/ctxfuse.kext/

Note: Older builds (20.9 or less) can use sudo kextutil -t /Library/Filesystems/ctxfuse.fs/Contents/Extensions/10.11/ctxfuse.kext/

After running this command, open the system preferences in the security pane and see if you can approve the prompt.


While running the above command, if you encounter the “Unable to stage kext” error then perform the action items highlighted below:

image.png

  1. As suggested here, run the below command:
    • chflags restricted /Volumes/Macintosh HD/private/var/db/KernelExtensionManagement
  2. People who have ran into the staging error have also reported upgrading to MacOS 10.15 Catalina also fixes the issue.

Related:

  • No Related Posts

Citrix Cloud: Unable to create/update machine catalog with the error “No facility available for disk upload. Unable to create any functioning volume service VMs. The given key was not present in the dictionary”

Citrix Leave a comment
In rare conditions, you may be unable to create or update a machine catalog hosted on AWS. On analyzing the CDF traces, you may find an snippet similar to the one below.

73564371 0 12:41.4 53848 3220 1 RemoteHCLServerLog 1 Error [AWS]: VolumeServiceManager.ClaimSlot: No volume workers created after signalling unmet demand. Assuming dead volume service.

73564372 0 12:41.4 53848 3220 1 RemoteHCLServerLog 1 Error “[AWS]: PluginMachineManager.CreateDiskWithContent: There is no available service for populating the disk ‘prepare-identity’. Details: PluginUtilities.Exceptions.NoDiskContentTransferServiceException: No facility available for disk upload. Unable to create any functioning volume service VMs. The given key was not present in the dictionary. —> PluginUtilities.Exceptions.WrappedPluginException: Unable to create any functioning volume service VMs. The given key was not present in the dictionary. —> PluginUtilities.Exceptions.WrappedPluginException: The given key was not present in the dictionary.

— End of inner exception stack trace —

— End of inner exception stack trace —

at CloudCommon.VolumeService.VolumeServiceManager.WriteDiskDataToVolume(String availabilityZoneId, String targetVmId, String volumeId, IStreamVirtualDisk diskData)

at CloudCommon.CloudPluginBase.PluginMachineManager.CreateDiskWithContent(String vmId, String diskName, Int32 diskIndex, IStreamVirtualDisk diskData, IHypAvailabilityZone zone, IVolumeServiceState volumeServiceState)”

73564374 2 12:41.5 53848 3220 1 RemoteHCLServerLog 1 Error “[AWS]: PluginMachineManager.CreateCompleteVM: Error while attempting to create VM (name=’Preparation – TESTING0MULTISESSION-29THAPRIL – 7qRw1h7ZUEGuD6qljZE47g’, id=’i-05481da2de3c21cd0′). Exception: ‘PluginUtilities.Exceptions.NoDiskContentTransferServiceException: No facility available for disk upload. Unable to create any functioning volume service VMs. The given key was not present in the dictionary. —> PluginUtilities.Exceptions.WrappedPluginException: Unable to create any functioning volume service VMs. The given key was not present in the dictionary. —> PluginUtilities.Exceptions.WrappedPluginException: The given key was not present in the dictionary.

— End of inner exception stack trace —

— End of inner exception stack trace —

at CloudCommon.VolumeService.VolumeServiceManager.WriteDiskDataToVolume(String availabilityZoneId, String targetVmId, String volumeId, IStreamVirtualDisk diskData)

at CloudCommon.CloudPluginBase.PluginMachineManager.CreateDiskWithContent(String vmId, String diskName, Int32 diskIndex, IStreamVirtualDisk diskData, IHypAvailabilityZone zone, IVolumeServiceState volumeServiceState)

at CloudCommon.CloudPluginBase.PluginMachineManager.ProcessDisks(String vmId, Dictionary`2 disks, IHypAvailabilityZone zone, IVolumeServiceState volumeServiceState)

at CloudCommon.CloudPluginBase.PluginMachineManager.CreateCompleteVM(String name, IVMMetadata metadata, String serviceOffering, IList`1 securityGroups, IList`1 disks, IVolumeServiceState volumeServiceState, Boolean enableNetwork, INetworkInterfaceDetails networkInterfaceDetails, IHypAvailabilityZone zone, Boolean dedicatedTenancy, CloudTenancy tenancyType, Boolean tagVms, String customProperties)'”

73564471 0 12:48.3 53848 3220 1 RemoteHCLServerLog 1 Error “CloudRunQueue-4 – caught exception PluginUtilities.Exceptions.NoDiskContentTransferServiceException: No facility available for disk upload. Unable to create any functioning volume service VMs. The given key was not present in the dictionary. —> PluginUtilities.Exceptions.WrappedPluginException: Unable to create any functioning volume service VMs. The given key was not present in the dictionary. —> PluginUtilities.Exceptions.WrappedPluginException: The given key was not present in the dictionary.

— End of inner exception stack trace —

— End of inner exception stack trace —

at CloudCommon.VolumeService.VolumeServiceManager.WriteDiskDataToVolume(String availabilityZoneId, String targetVmId, String volumeId, IStreamVirtualDisk diskData)

at CloudCommon.CloudPluginBase.PluginMachineManager.CreateDiskWithContent(String vmId, String diskName, Int32 diskIndex, IStreamVirtualDisk diskData, IHypAvailabilityZone zone, IVolumeServiceState volumeServiceState)

at CloudCommon.CloudPluginBase.PluginMachineManager.ProcessDisks(String vmId, Dictionary`2 disks, IHypAvailabilityZone zone, IVolumeServiceState volumeServiceState)

at CloudCommon.CloudPluginBase.PluginMachineManager.CreateCompleteVM(String name, IVMMetadata metadata, String serviceOffering, IList`1 securityGroups, IList`1 disks, IVolumeServiceState volumeServiceState, Boolean enableNetwork, INetworkInterfaceDetails networkInterfaceDetails, IHypAvailabilityZone zone, Boolean dedicatedTenancy, CloudTenancy tenancyType, Boolean tagVms, String customProperties)

at CloudCommon.CloudPluginBase.PluginHypervisor.<>c_DisplayClass39_0.<BeginCreateCompleteVM>b_0(PluginMachineManager manager)

at Citrix.HypervisorCommunicationsLibrary.TaskRunItem`2.Run(T manager)

at HypervisorsCommon.HCL.TaskRunner`1.Run()”

Related:

  • No Related Posts

MacOS Local Privilege Escalation Exploitable through Cisco AnyConnect Secure Mobility Client

Cisco Leave a comment

On May 26, 2020, Apple released a security update for MacOS Catalina, Mojave, and High Sierra. Part of this update addressed a local privilege escalation vulnerability (CVE-2020-9817).

Cisco has determined that Cisco AnyConnect Secure Mobility Client releases 4.10.00093 and earlier could be used to exploit this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-mac-priv-esc-VqST2nrT

Security Impact Rating: Informational

Related:

  • No Related Posts