heya! I’m having newly enrolled machines not detect the users on the host (seeing the “No users detected on this host”) error. •

fleet-osquery

1.8.0 •

osquery

5.8.2 • Ubuntu desktop 22.10 •

fleet

4.30.1 Weirdly, if i manually run

select * from users;

from the fleet console, it picks up users 🤷 any ideas?

Maybe it isn't enabled? https://fleetdm.com/docs/using-fleet/configuration-files#features-enable-host-users

I’ll take a look at this! We have machines with somewhat older enrolments report users just fine, but it could be this

hi! i have the same message ''No users detected on this host" in host details from web.

Fleet

4.35.1

Osquery

5.8.2

Orbit

1.13.0 In configuration file I set:

features:
    enable_host_users: true

Can you please help me with this problem?

I had also pointed out this problem a few months ago. It keeps happening 🫤 https://osquery.slack.com/archives/C01DXJL16D8/p1683835777496419

@Lili It looks like this is also an Ubuntu host. What version? Do you get results if you run the detail query as a live query?

@Kathy Satterlee hello! this is a Debian GNU/Linux 11.0.0 hosts, osquery version is 5.8.2 i ran detail query as live query

WITH cached_groups AS (select * from groups)
 SELECT uid, username, type, groupname, shell
 FROM users LEFT JOIN cached_groups USING (gid)
 WHERE type <> 'special' AND shell NOT LIKE '%/false' AND shell NOT LIKE '%/nologin' AND shell NOT LIKE '%/shutdown' AND shell NOT LIKE '%/halt' AND username NOT LIKE '%$' AND username NOT LIKE '\_%' ESCAPE '\' AND NOT (username = 'sync' AND shell ='/bin/sync' AND directory <> '')

And get users from hosts