Size: 2149
Comment: highlight the fallback solution
|
Size: 3458
Comment: Documented workaround for Task Scheduler problems with Windows 8 and Server 2012
|
Deletions are marked like this. | Additions are marked like this. |
Line 35: | Line 35: |
=== Windows > 8 and Server 2012 Task Scheduler Problems GnuPG uses (as suggested by Microsoft and usual) {{{%APPDATA%\gnupg}}} to store data on Windows. When launched from the Task Scheduler {{{%APPDATA%}}} is not always set to the correct users directory. (If you launch it with system privileges it is another place altogether). GnuPG as a result is unable to find the Keys or configuration in the directory Windows provides. This is a known Windows bug. [[https://support.microsoft.com/en-us/kb/2968540|See the Knowledge Base article]] Or [[https://social.technet.microsoft.com/Forums/windowsserver/en-US/5e6dc56d-9069-42e3-a7e3-87437cf8ed81/scheduled-tasks-run-in-the-default-user-profile|This technet discussion]] Instead of the Workaround mentioned in the knowledge base article GnuPG provides you with the option to set the Home directory as part of the command. (--homedir) Which makes it easy to workaround that bug. For example: {{{ gpg --homedir c:\Users\aheinecke\AppData\Roaming\gnupg --encrypt -r <recipient> <file> }}} Would ignore the broken value of {{{%APPDATA%}}} and use the keys stored in {{{c:\Users\aheinecke\AppData\Roaming\gnupg}}} instead. Make sure access rights are set accordingly of course so that this works with the user the Scheduled task runs under. |
this page is a stub, please help to complete it
There are several places where someone finds information about how to trouble shoot a crypto application problem.
TODO: link to the sections in the gpg4win compendium and other documentation.
for service technicians
Goal is to build up a valid understanding of the problem, how it came to be and possible solutions.
- If the problem is with GpgOL, try the operation with GpgEX or Kleopatra, to exclude Outlook's influence. Note that if GpgEX/Kleopatra works, you have a fallback solution to just work via files and send them by attachment, so can can still use crypto, but with less comfort.
- If GUI frontend applications fail, try to do the operations on the command line. This way you can often exclude that the problem is within the frontend. And you sometimes get additional helpful messages.
- Look at or activate and look at additional diagnostic output. (http://gpg4win.de/doc/en/gpg4win-compendium_29.html, TODO link or refer to specific section in the official docs.) There are many ways where additional output can be found or enabled.
- Try to reproduce, sometimes a different installation or a different computer gives you an idea about the difference between a running and a problem case.
- Precisely check the version numbers of components.
- Check general operating or usage issues. Things like a full harddrive or wrong filesystem permissions.
Kleopatra crashes/does not start
Background: Kleopatra (for Gpg4win 2.2.x) is build on top of Qt4 and KDE Platform 4 windows port.
- Start Kleopatra manually on the command line, see for messages there.
- Either activate the Kleo log (see general link above in the diagnostic step)
- or try to see the diaognistic messages that the operating system receives, you can use DebugView
- If you get a crash and no further information, you could try to get a backtrace, e.g. with a gdb build for windows.
Windows > 8 and Server 2012 Task Scheduler Problems
GnuPG uses (as suggested by Microsoft and usual) %APPDATA%\gnupg to store data on Windows. When launched from the Task Scheduler %APPDATA% is not always set to the correct users directory. (If you launch it with system privileges it is another place altogether). GnuPG as a result is unable to find the Keys or configuration in the directory Windows provides.
This is a known Windows bug. See the Knowledge Base article Or This technet discussion
Instead of the Workaround mentioned in the knowledge base article GnuPG provides you with the option to set the Home directory as part of the command. (--homedir) Which makes it easy to workaround that bug.
For example:
gpg --homedir c:\Users\aheinecke\AppData\Roaming\gnupg --encrypt -r <recipient> <file>
Would ignore the broken value of %APPDATA% and use the keys stored in c:\Users\aheinecke\AppData\Roaming\gnupg instead. Make sure access rights are set accordingly of course so that this works with the user the Scheduled task runs under.