Quantcast
Channel: Ocsinventory Q&A - Recent questions and answers in OCS Inventory NG server
Viewing all 7069 articles
Browse latest View live
↧

Generate cacert.pem from Sectigo wildcard cert

October 2, 2020, 6:57 am
$
0
0

OCS Server version : 2.6 and 2.8

OCS Windows agent version : 2.6 and 2.8

How on earth to get cacert.pm from this particular certificate? I successfully added the file in apache setting and no issue to browse ocs https page when valid certificate but no matter which files I tried to use it does not work on Windows agent with following error ;

ERROR *** AGENT => Failed to send Prolog <SSL peer certificate or SSH remote key was not OK>

I've literally tried thousands of imaginable way to generate cacert.pem from

apache line SSLCertificateFile \path\to\crt\file

generate cert from mozilla, chrome browser

Sectigo website

None of them seems to work. I've tried self signed cert on another server and it's working flawlessly.

Appreciate if anyone can help. Thanks!!

↧
Search

Answered: Generate cacert.pem from Sectigo wildcard cert

October 2, 2020, 11:05 am
$
0
0
hy, you mean cacert.pem not cacert.pm ? right

an you only have a problem with sectigo certs ? right?

Perhaps it has something to do with a new certificate design rule which Sectigo uses

https://tech.xenit.se/chrome-certificate-warning-invalid-common-name/

I can recomment XCA to analyse how the certificate loos in detail

https://hohnstaedt.de/xca/

perhaps Sectido uses more advanced certificate creation rules ... and OCS-Inventory can't deal with it.

perhaps the problem is only that the cert from Sectigo is a wildcard cert.

perhaps you have to follow this guide here to import the whole certificate tree

I think the certificate tree is the most valuable way to get a solution
http://ask.ocsinventory-ng.org/9713/certificat-wildcard

KInd regards
↧
↧

Answered: The server does not detect clients (Agent)

October 2, 2020, 11:11 am
↧

Answered: problème suite à mise à jour 2.7.0.1 vers 2.8 bug?

October 5, 2020, 7:13 am
$
0
0
Hello,

The same just happend to me, so i add my self for notifications :)

Thanks!
↧

OCS Guide for SSL setup

October 5, 2020, 12:11 pm
$
0
0

Is there a guide for how to set up SSL on OCS? I tried editing the z-ocsinventory-server.conf file in /etc/apache2/conf-available and I get an error when restarting Apache.

This is what I have configured so far:  

#SSL apache settings
  SSLEngine "SSL_ENABLE"
  SSLCertificateFile "/etc/ssl/wildcard_new.crt"
  SSLCertificateKeyFile "/etc/ssl/wildcard_new.key"
  #SSLCACertificateFile "SSL_CERTIFICATE_FILE"
  #SSLCACertificatePath "SSL_CERTIFICATE_PATH"
  #SSLVerifyClient "SSL_VALIDATE_CLIENT"

The error I get when starting Apache is:

Oct 05 18:53:29 ocs systemd[1]: Starting The Apache HTTP Server...
Oct 05 18:53:29 ocs apachectl[13993]: AH00526: Syntax error on line 302 of /etc/apache2/conf-enabled/z-ocsinventory->
Oct 05 18:53:29 ocs apachectl[13993]: Argument must be On, Off, or Optional
Oct 05 18:53:29 ocs apachectl[13979]: Action 'start' failed.
Oct 05 18:53:29 ocs apachectl[13979]: The Apache error log may have more information.
Oct 05 18:53:29 ocs systemd[1]: apache2.service: Control process exited, code=exited, status=1/FAILURE
Oct 05 18:53:29 ocs systemd[1]: apache2.service: Failed with result 'exit-code'.
Oct 05 18:53:29 ocs systemd[1]: Failed to start The Apache HTTP Server.

Any tips? I haven't changed any of the settings in /etc/apache2/sites-available/000-default.conf or default-ssl.conf files. 
↧
↧

Answered: Permission denied on http://SERVER/ocsreports/

October 6, 2020, 12:38 am
$
0
0
I found the solution on an other website.

It was SELINUX denying external acces to the database.
↧

Answered: problème suite à mise à jour 2.7.0.1 vers 2.8 bug?

October 6, 2020, 1:19 am
$
0
0
Bonjour,

Même problème ici - mise à jour à la 2.8 et plus d'ordinateurs affichés - bien que les données des ordinateurs semblent remontées d'après le dashboard.

Debian 10 - 4.19.0-11.

Une idée ?

Merci !
↧

Upgrade OCS 2.7 to 2.8

October 6, 2020, 2:14 am
$
0
0 
Since the migration from OCs 2.7 to 2.8, CAS authentication no longer works.
I have modified the cas.php file
Is there anything else to do?
In the var.php file I can not find the type of authentication by CAS except SSO or LDAP
↧
Search

Answered: OCS Guide for SSL setup

October 6, 2020, 2:38 am
↧
↧

duplicate rules not applied correctly.

October 6, 2020, 2:50 am
$
0
0 
Hello,

the rule set to check for duplicate pc "MAC and Serial", is often not applied correctly.
Some PCs are inventoried as duplicates even with the same "MAC and Serial" In activity.log i have this information: Tue Oct 6 11:06:26 2020;53692;517;PCXY-2020-09-30-07-34-54;OCS-NG_WINDOWS_AGENT_v2.6.0.0;duplicate;replacing_error 
OCS Server 2.7
OS Ubuntu 18.04 LTS
↧

How to upgrade OCS docker image

October 6, 2020, 3:02 am
$
0
0
Hello !

I currently have OCS Inventory in Docker (version 2.7) on Ubuntu server, how can I get the last update in 2.8 while keeping the database ?
Thank you !
↧

Answered: Teledeploiement problème de statistique des succès

October 6, 2020, 5:46 am
$
0
0
Bonjour,

Nous rencontrons le même souci de notre côté.

Bien à vous
↧

OCS SERVEUR DEBIAN PROBLEME REMONTE

October 7, 2020, 12:21 am
$
0
0
Bonjour,

Je suis en alternance en BTS SIO, j'ai été amené a monté un serveur OCS sur un OS debian ça a été une premiere pour moi j'ai été vite perdu ^^ mais aujourd'hui OCS fonctionne via le web, j'utilise MariaDB pour la BDD, mais un problème ce pose depuis le début j'ai des ordinateurs qui ne remonte pas ou qui remonte que quand l'ordinateur est en cours d'utilisation... Alors que le but premier est d'inventorié les ordinateurs du parc informatique.
En faisant des test comme dit plus haut j'allume une machine cliente ocs étant installé ce lance ect, il remonte bien sur mon ocs, j’éteins la machine 10 minutes plus tard la machine n'est plus dans mon ocs

Ma problématique est la suivante : Certaine machines sont inventorié et ne bougent plus alors que de nouvelle machines sont inventorié que quand elles sont en cours d'utilisation, d'où ça peut venir ? de mon serveur OCS ? de l'agent OCS ?

Bien Cordialement Theo R
↧
↧

Answered: OCS SERVEUR DEBIAN PROBLEME REMONTE

October 7, 2020, 5:32 am
$
0
0

hy,all the clients calculate a random number which will be counted down .. if the number is zero the client send the inventory. default value is 24 hours .. so the client has to count down 24 h = 86400 seconds to send the inventory.

You can see the value in

C:\ProgramData\OCS Inventory NG\Agent\ocsinventory.ini

under TTO_WAIT=

The report time can be changed in server

see here

set the parameter PROLOG_FREQ=1

http://ask.ocsinventory-ng.org/3564/how-can-i-change-the-prolog_freq

Kind regards

↧

Can't load Perl - Apache.pm

October 8, 2020, 2:47 am
$
0
0
Hi!

After upgrade from Debian 9 to 10 I can't start apache

[Thu Oct 08 09:48:04.106997 2020] [perl:error] [pid 1176] Can't load Perl module Apache::Ocsinventory::Plugins::Apache for server ocs.sewik.local:0, exiting...
[Thu Oct 08 09:52:12.750155 2020] [perl:error] [pid 1570] Can't locate Apache/Ocsinventory/Plugins/Apache.pm in @INC (you may need to install the Apache::Ocsinventory::Plugins::Apache module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.28.1 /usr/local/share/perl/5.28.1 /usr/lib/x86_64-linux-gnu/perl5/5.28 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.28 /usr/share/perl/5.28 /usr/local/lib/site_perl /etc/apache2) at (eval 16) line 1.\n

Anyone could help?
↧
Search

The cron_cve.php sends too many queries

October 9, 2020, 3:04 am
$
0
0

Hi:

My environment is as follows:

Operating system:

  • OS Name: Linux x86_64
  • Version: 4.15.0-112-generic
  • RAM installed: 3001 MB
  • Free RAM: 677 MB
  • CPU: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
  • Distribution: Ubuntu 18.04.5 LTS

OCS server:

  • PHP Version :7.2.24
  • Web Server :Apache/2.4.46 (Ubuntu)
  • Database Server : mariadb.org binary distribution version 10.3.17-MariaDB-1:10.3.17+maria~bionic-log
  • Version OCSReports: 2.8  (update form 2.6)
I have CVE enabled and set:
  • VULN_CVESEARCH_HOST: http://localhost:5000

When I run the cron_cve.php script manually, in the script console I get entries similar to this:

  • ....
  • Processing FNMT-RCM softwares....
  • ....

And in the cve-search server console i can see one entry for each query made by the cron_cve.php script

  • ...
  • 127.0.0.1 - - [09/Oct/2020 10:37:10] "GET /api/search/fnmtrcm/configurador_fnmt HTTP/1.1" 
  • ...

The problem is that there is one entry for each computer that has the software installed, even if it is the same software, in the same version and installed on computers with the same operating system.

I have 500 OCS clients with the same operating system and 90% of the software installed on them is the same, in the same versions, so the time taken for the script is several days ...

I think that if the queries were done only once per different software and version, the execution time would be reduced to a few hours

Is it correct that the script works as described? 

is there any reason to submit all these requests?

Thank you

↧

Answered: How to change mysql password

September 25, 2020, 5:53 am
$
0
0
OK i stopped playing around that.
Thanks
↧
↧

Answered: Can't load Perl - Apache.pm

October 14, 2020, 12:03 am
$
0
0
Hi,

perl module missing. Install it.

Regards
↧

CVE database - 0 CVE has been added to databas

October 14, 2020, 1:18 am
$
0
0

Hello


I try to configure CVE database in OCS Inventory server but when I run the command it doesn't work
It scan every softwares registred in OCS and finished by " 0 CVE has been added to database."

I can also see that the server is communicate with the CVE url --> "https://cve.circl.lu"

↧

Answered: CVE database - 0 CVE has been added to databas

October 14, 2020, 2:09 am
$
0
0

Hi

The service has been disabled by"cve.circl.lu".

You can check it sending one query from a browser.

  • Query: https://cve.circl.lu/api/search/oracle/jre
  • Response: The requested resource has been permanently removed from the API on this server due to abuse. It is recommended to use a local installation of CVE Search if the fulltext search is needed.More information can be found at the CVE Search Github page

You have to find another service (I don't know which one) or install one on your own.

↧
Viewing all 7069 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>