You are not logged in.

Announcement

 Téléchargez la dernière version stable de GLPI      -     Et vous, que pouvez vous faire pour le projet GLPI ? :  Contribuer
 Download last stable version of GLPI                      -     What can you do for GLPI ? :  Contribute

#1 2024-08-21 10:54:06

ccandaes
Member
Registered: 2023-02-09
Posts: 125

Inventory MacOS SSL

Hello,

I am having difficulty establishing the SSL connection between my agent under MacOS and my GLPI 10.0.14 server

I would like to point out that I am not having any problem with inventory upload on my Windows workstations where I copy my cachain.pem certificate into the install directory and then declare the path to the certificate when installing the GLPI agent.

So I installed the latest version of GLPI Agent 1.10 on a Mac equipped with an Apple M3 chip

I created a local.d file in /Applications/GLPI-Agent/etc/conf.d

I put the following information (my server URL, the Tag, the path to the pem file and the debug activation:

server = https://glpi.xxxx.fr
tag = my_favorite_tag
ca-cert-file = /Applications/GLPI-Agent/cachain.pem
debug = 1

When I launch the inventory via localhost:62354 in my web browser, no new entry appears on my glpi server, nothing comes back and I have the lines below in the client machine log:

[Mon Aug 19 14:52:05 2024][info] [http client] SSL Client warning: Peer certificate not verified
[Mon Aug 19 14:52:05 2024][info] [http client] SSL Client info: Cert-Issuer: '/C=NL/O=GEANT Vereniging/CN=GEANT OV RSA CA 4', (company confidential information)
[Mon Aug 19 14:52:05 2024][info] [http client] SSL server certificate fingerprint: "fingerprint of my server"
[Mon Aug 19 14:52:05 2024][info] [http client] You can set it in conf as 'ssl-fingerprint' and disable 'no-ssl-check' option to trust that server certificate

**************

The machine is in the same subnet as my Windows workstations which manage to communicate, port 443 is open, no antivirus or firewall active on the client workstation.

1/ What do you think I did wrong?

2/ What is the difference between the ca-cert-file and ssl-cert-file entries in the conf file?

3/ I tried putting the finger print in the conf file via the ssl-fingerprint = "fingerprint of my server" entry but it didn't work

4/ I double-clicked on my cachain.pem file to import it into the Mac keychain store in "System"

I don't know where to look anymore.

Thanks for your help.

Offline

#2 2024-08-21 15:28:28

ccandaes
Member
Registered: 2023-02-09
Posts: 125

Re: Inventory MacOS SSL

I redid the whole procedure by putting the server fingerprint once and then during the second try the path of the certificate, this time I no longer have an error message in the log, everything seems normal however nothing comes back in the console. Any idea?

Offline

#3 2024-08-23 11:51:31

ccandaes
Member
Registered: 2023-02-09
Posts: 125

Re: Inventory MacOS SSL

this is the log

Il y a juste une ligne "Full inventory postponed 7/14" en bout de log

[Fri Aug 23 11:42:19 2024][debug] [http server] GET request /now from client ::1
[Fri Aug 23 11:42:19 2024][debug] Trusted target ip: 192.168.x.x32, ::ffff:c0a8:983/128
[Fri Aug 23 11:42:19 2024][debug] Trusted client ip/range: 127.0.0.1/32, ::ffff:7f00:1/128, ::1/128
[Fri Aug 23 11:42:19 2024][debug] [http server] rescheduling next contact for all targets right now
[Fri Aug 23 11:42:19 2024][debug] [http server] response status 200
[Fri Aug 23 11:42:20 2024][info] target server0: server https://glpi.xxxxx.fr/
[Fri Aug 23 11:42:20 2024][info] sending contact request to server0
[Fri Aug 23 11:42:20 2024][debug] forking process 1137 to handle child job
[Fri Aug 23 11:42:20 2024][debug] forking process 1137 to handle task Inventory
[Fri Aug 23 11:42:20 2024][info] running task Inventory
[Fri Aug 23 11:42:20 2024][info] New inventory from Dircom-p19-2024-08-21-15-05-13 for server0 (tag=SC)
[Fri Aug 23 11:42:21 2024][debug] [http server] GET request / from client ::1
[Fri Aug 23 11:42:21 2024][debug] [http server] response status 200
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::AccessLog
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Arch
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Batteries
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Databases
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Domains
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Drives
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Environment
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Firewall
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Hostname
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Networks
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::OS
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Processes
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Remote_Mgmt
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::SSH
[Fri Aug 23 11:42:21 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Screen
[Fri Aug 23 11:42:21 2024][debug] retrieving AppleBacklightDisplay and AppleDisplay datas:
[Fri Aug 23 11:42:22 2024][debug] retrieving EDID data:
[Fri Aug 23 11:42:22 2024][debug] - reading /sys/devices content: directory not available
[Fri Aug 23 11:42:22 2024][debug] - running monitor-get-edid-using-vbe command: command not available
[Fri Aug 23 11:42:22 2024][debug] - running monitor-get-edid command: command not available
[Fri Aug 23 11:42:22 2024][debug] - running get-edid command: command not available
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Softwares
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Storages
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Timezone
[Fri Aug 23 11:42:22 2024][debug] Using DateTime::TimeZone to get the timezone name
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::Generic::Users
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::AntiVirus
[Fri Aug 23 11:42:22 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Batteries
[Fri Aug 23 11:42:23 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Bios
[Fri Aug 23 11:42:23 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::CPU
[Fri Aug 23 11:42:24 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Drives
[Fri Aug 23 11:42:27 2024][debug] FileVault 2 is disabled
[Fri Aug 23 11:42:27 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Firewall
[Fri Aug 23 11:42:27 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Hardware
[Fri Aug 23 11:42:28 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Hostname
[Fri Aug 23 11:42:29 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::License
[Fri Aug 23 11:42:29 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Memory
[Fri Aug 23 11:42:30 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Networks
[Fri Aug 23 11:42:30 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::OS
[Fri Aug 23 11:42:31 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Printers
[Fri Aug 23 11:42:32 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Psu
[Fri Aug 23 11:42:32 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Softwares
[Fri Aug 23 11:42:37 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Sound
[Fri Aug 23 11:42:38 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Storages
[Fri Aug 23 11:42:40 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::USB
[Fri Aug 23 11:42:40 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Uptime
[Fri Aug 23 11:42:40 2024][debug] Running GLPI::Agent::Task::Inventory::MacOS::Videos
[Fri Aug 23 11:42:41 2024][debug] Running GLPI::Agent::Task::Inventory::Provider
[Fri Aug 23 11:42:41 2024][debug] Running GLPI::Agent::Task::Inventory::Virtualization
[Fri Aug 23 11:42:41 2024][debug] Running GLPI::Agent::Task::Inventory::Vmsystem
[Fri Aug 23 11:42:41 2024][debug] Section DRIVES has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Section HARDWARE has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Section PROCESSES has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Section SOFTWARES has changed since last inventory
[Fri Aug 23 11:42:41 2024][debug] Full inventory postponed: 7/14
[Fri Aug 23 11:42:42 2024][info] target server0: next run: Sat Aug 24 11:02:06 2024 - https://glpi.xxxxx.fr/

Offline

Board footer

Powered by FluxBB