You are not logged in.

Announcement

 Téléchargez la dernière version stable de GLPI      -     Et vous, que pouvez vous faire pour le projet GLPI ? :  Contribuer
 Download last stable version of GLPI                      -     What can you do for GLPI ? :  Contribute

Pages: 1

#1 2024-08-21 15:00:47

ccandaes
Member
Registered: 2023-02-09
Posts: 125

Macos + certif

Bonjour,

Je rencontre des difficultés à établir la connexion SSL entre mon agent sous MacOS et mon serveur GLPI 10.0.14

Je précise que je ne rencontre aucun problème de remontée d'inventaire sur mes postes windows où je copie mon certificat cachain.pem dans le répertoire d'install puis je déclare le chemin du certif au moment de l'instal du glpi agent.


J'ai donc installé la dernière version de GLPI Agent 1.10 sur un Mac équipé d'une puce Apple M3

J'ai créé un fichier local.d dans /Applications/GLPI-Agent/etc/conf.d

J'y ai mis les infos ci-dessous (l'URL de mon serveur, le Tag, le chemin du fichier pem et l'activation du debug :

server = https://glpi.xxxx.fr
tag = mon_tag_favori
ca-cert-file = /Applications/GLPI-Agent/cachain.pem
debug = 1

Lorsque je lance l'inventaire via localhost:62354 dans mon navigateur web, aucune nouvelle entrée n'apparait sur mon serveur glpi, rien ne remonte et j'ai les lignes ci-dessous dans le log de la machine client :


[Mon Aug 19 14:52:05 2024][info] [http client] SSL Client warning: Peer certificate not verified
[Mon Aug 19 14:52:05 2024][info] [http client] SSL Client info: Cert-Issuer: '/C=NL/O=GEANT Vereniging/CN=GEANT OV RSA CA 4', (infos confidentielles de l'entreprise)
[Mon Aug 19 14:52:05 2024][info] [http client] SSL server certificate fingerprint: "fingerprint de mon serveur"
[Mon Aug 19 14:52:05 2024][info] [http client] You can set it in conf as 'ssl-fingerprint' and disable 'no-ssl-check' option to trust that server certificate

**************

La machine est dans le même sous-réseau que mes postes windows qui eux parviennent à communiquer, le port 443 est ouvert, aucun antivirus ni parefeu actif sur le poste client.

1/ Qu'est-ce que j'ai fait de travers selon vous ?
2/ Quelle est la différence entre l'entrée ca-cert-file et ssl-cert-file dans le fichier de conf ?
3/ J'ai essayé en mettant dans le fichier de conf la finger print via l'entrée ssl-fingerprint = "fingerprint de mon serveur"  mais ca n'a pas fonctionné
4/ J'ai double cliqué sur mon fichier cachain.pem pour l'importer dans le keychain store du Mac dans "Système"

Je ne sais plus où chercher.

Merci de votre aide.

Offline

#2 2024-08-21 15:28:11

ccandaes
Member
Registered: 2023-02-09
Posts: 125

Re: Macos + certif

J'ai refait toute la procédure en mettant une première fois le fingerprint du serveur puis lors du second essai le chemin du certificat, cette fois-ci je n'ai plus de message d'erreur dans le log, tout semble normal cependant rien ne remonte dans la console. Une idée ?

Offline

#3 2024-08-23 11:51:06

ccandaes
Member
Registered: 2023-02-09
Posts: 125

Re: Macos + certif

Il y a juste une ligne "Full inventory postponed 7/14" en bout de log

[Fri Aug 23 11:42:19 2024][debug] [http server] GET request /now from client ::1
[Fri Aug 23 11:42:19 2024][debug] Trusted target ip: 192.168.x.x32, ::ffff:c0a8:983/128
[Fri Aug 23 11:42:19 2024][debug] Trusted client ip/range: 127.0.0.1/32, ::ffff:7f00:1/128, ::1/128
[Fri Aug 23 11:42:19 2024][debug] [http server] rescheduling next contact for all targets right now
[Fri Aug 23 11:42:19 2024][debug] [http server] response status 200
[Fri Aug 23 11:42:20 2024][info] target server0: server https://glpi.xxxxx.fr/
[Fri Aug 23 11:42:20 2024][info] sending contact request to server0
[Fri Aug 23 11:42:20 2024][debug] forking process 1137 to handle child job
[Fri Aug 23 11:42:20 2024][debug] forking process 1137 to handle task Inventory
[Fri Aug 23 11:42:20 2024][info] running task Inventory
[Fri Aug 23 11:42:20 2024][info] New inventory from Dircom-p19-2024-08-21-15-05-13 for server0 (tag=SC)
[Fri Aug 23 11:42:21 2024][debug] [http server] GET request / from client ::1
[Fri Aug 23 11:42:21 2024][debug] [http server] response status 200
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::AccessLog
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Arch
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Batteries
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Databases
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Domains
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Drives
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Environment
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Firewall
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Hostname
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Networks
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::OS
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Processes
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Remote_Mgmt
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::SSH
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Screen
[Fri Aug 23 11:42:21 2024][debug] retrieving AppleBacklightDisplay and AppleDisplay datas:
[Fri Aug 23 11:42:22 2024][debug] retrieving EDID data:
[Fri Aug 23 11:42:22 2024][debug] - reading /sys/devices content: directory not available
[Fri Aug 23 11:42:22 2024][debug] - running monitor-get-edid-using-vbe command: command not available
[Fri Aug 23 11:42:22 2024][debug] - running monitor-get-edid command: command not available
[Fri Aug 23 11:42:22 2024][debug] - running get-edid command: command not available
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Softwares
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Storages
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Timezone
[Fri Aug 23 11:42:22 2024][debug] Using DateTime::TimeZone to get the timezone name
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Users
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::AntiVirus
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Batteries
[Fri Aug 23 11:42:23 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Bios
[Fri Aug 23 11:42:23 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::CPU
[Fri Aug 23 11:42:24 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Drives
[Fri Aug 23 11:42:27 2024][debug] FileVault 2 is disabled
[Fri Aug 23 11:42:27 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Firewall
[Fri Aug 23 11:42:27 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Hardware
[Fri Aug 23 11:42:28 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Hostname
[Fri Aug 23 11:42:29 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::License
[Fri Aug 23 11:42:29 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Memory
[Fri Aug 23 11:42:30 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Networks
[Fri Aug 23 11:42:30 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::OS
[Fri Aug 23 11:42:31 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Printers
[Fri Aug 23 11:42:32 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Psu
[Fri Aug 23 11:42:32 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Softwares
[Fri Aug 23 11:42:37 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Sound
[Fri Aug 23 11:42:38 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Storages
[Fri Aug 23 11:42:40 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::USB
[Fri Aug 23 11:42:40 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Uptime
[Fri Aug 23 11:42:40 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Videos
[Fri Aug 23 11:42:41 2024][debug] Running GLPI::Agent::Task::Inventory::Provider
[Fri Aug 23 11:42:41 2024][debug] Running GLPI::Agent::Task::Inventory::Virtualization
[Fri Aug 23 11:42:41 2024][debug] Running GLPI::Agent::Task::Inventory::Vmsystem
[Fri Aug 23 11:42:41 2024][debug] Section DRIVES has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Section HARDWARE has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Section PROCESSES has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Section SOFTWARES has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Full inventory postponed: 7/14
[Fri Aug 23 11:42:42 2024][info] target server0: next run: Sat Aug 24 11:02:06 2024 - https://glpi.xxxxx.fr/

Offline

Pages: 1

Board footer

Powered by FluxBB