Topic: [Announce] Inventory tools: OCS and GLPI for SME 7.x

[cool34000]

Hi everyone!


Based on Daniel's howto, I've made an rpm installation for OCS Inventory NG and GLPI.
You're highly encouraged to read his howto before begining here...
The only big difference is that the rpm install goes in /opt.


You need to download a few dependencies provided by sme.firewall-services.com
Then use yum to install them

Code: [Select]

#tar xvzf ./perl-deps-ocs.tar.gz
#yum localinstall ./perl-deps-ocs/*.rpm
Install mod_perl and enable it

Code: [Select]

#yum install mod_perl
#/sbin/e-smith/config setprop modPerl status enabled
#/sbin/e-smith/expand-template /etc/httpd/conf/httpd.conf
#/etc/init.d/httpd-e-smith restart
Download OCS and GLPI rpms
Then use yum to install both rpm

Code: [Select]

#yum localinstall smeserver-ocs_inventory_ng-1.01-3.noarch.rpm
#yum localinstall smeserver-glpi-0.68.3-2.noarch.rpm
OCS website is available at http://your-server-name/ocs
user:admin
pass: admin
GLPI website is available at http://your-server-name/glpi
user: glpi
pass: glpi

OCS is not fully working yet:
- a bug to fix in cron or logrotate
- deployment may not work (any help appreciated!)


GLPI can be installed without OCS:
Skip the whole howto, download GLPI and install it with the following command:

Code: [Select]

rpm -Uvh smeserver-glpi-0.68.3-2.noarch.rpm --nodeps

Any comments/suggestions/help will be appreciated!



Best regards,
Sylvain

[kevinb]

Hello Sylvain,

On a fresh install of SME in server only mode (not a domain controller or DHCP server, HTTP and SMTP proxies are on [default]), I ran yum update and then followed your instructions and had an issue.

Upon reboot after the last step I get a looping error: [error] can't load Perl module Apache :: Ocsinventory for server www.xxx.com:0 exiting

Is there a script setting that still points to an IBay from Daniel's Howto?


Kevin

[cool34000]

Hi

Thanks for reporting!
No there are no stuffs pointing to any ibay, all is in /opt
I may have forgot to put some tools in the right place...

I will make tests from scratch with a test server to see what's happening...

[cool34000]

Hi


Problem solved!
There were a few Perl files missing...

The new release  is on its way to the mirrors. I've updated the links on my 1st post, but it could take some time to sync (I didn't even finished to upload them)

Thanks again for your tests and sorry for the inconveniance.


Best regards,
Sylvain

[kryptos]

Hi,

I got this this during yum install on smeserver-ocs_inventory_ng  "error: unpacking of archive failed on file /opt/inventory/ocs.tar.gz;466a100d: cpio: read"


Regards,
Rocel

[cool34000]

Hi,

Krytos, please try to download the file again, mirror should be syncing...
Just wait a while before trying again.
If the file is corrupted, just let me know, I'll upload a fresh one.

Regards,
Sylvain

[kevinb]

Hi Sylvain,

The new contribs work ... thanks.

Now I have the problem that when I browse to the https://<server>/ocs and login in all the web pages have no text. Just boxes and icons.

Could this be a language setting issue?

Thank again

Kevin

[cool34000]

Hi!

Thanks for your comments.
Yes this is a language issue... Before login choose a language!

[cool34000]

Hi again...

About the logrotate bug,  I've just found this thread
I will fix it in my next release.

[Jáder]

Hi

Thank you by RPMs... everything working. BUT I have some questions:

1) I installed agent on windows, but cannot get it upload inventory.
Getting 500  HTTP error...  can this be because agent search for /ocsinventory and this install use /ocs ??

2) I'd like to install OCS on my server and do inventory on all my clients LAN.
So I'd like to have external (WAN) access to OCS server protected by just one user/password and just for upload inventory/download software, without web access to management interface - that would be another user/password). Anyone have tried, used it ?

3) I tried to install agent on linux but got Z::Lib error... will try to dianose using OCS forums... anyone already did this? I'd like to use linux agent on my SME713 servers and Ubuntu clients.

4) I tried to create a package to remote install (when it works) using foxit reader (1.5MB file). Compress it to zip format, but when try to add, OCS say cannot read Foxit.zip file!!!

Thanks

Jáder

BTW: I'm on MSN: jader31 AT terra DOT com DOT br or skype jader.marasca

[cool34000]

Hi,

Thanks for your comments.
I've added you to my msn contact list...

OCS works fine... I had some troubles when the agent was not properly launched. First reboot your computer...
And try to execute this from the 'execute box':

Code: [Select]

"C:\Program Files\OCS Inventory Agent\OCSInventory.exe" /server:YOURSERVERNAME /np /debugThis is working on all my network. I've tested all M$ OS from 2000 to Vista x64 and all are working.

/ocsinventory is a virtual directory which is used for communicating with the server.
You can verify it in /opt/inventory/conf/ocsinventory.conf: (end of file)

Code: [Select]

# Virtual directory for handling OCS Inventory NG agents communications
# Be carefull, do not create such directory into your web server root document !
#PerlTaintCheck On
<Location /ocsinventory>
order deny,allow
allow from all
Satisfy Any
        SetHandler perl-script
        PerlHandler Apache::Ocsinventory
</Location>

PerlModule Apache::Ocsinventory::SOAP;
<location /ocsinterface>
        SetHandler perl-script
        perlHandler "Apache::Ocsinventory::SOAP"
        order deny,allow
        allow from all
        Satisfy any
</location>You can't protect access from outside with a password as the agent has no auth included inside! But as you can see also in ocsinventory.conf access to this virtual directory is allowed from outside (ocs reports web interface is not). So you should be able to make inventory from outside (using your FQDN as servername)... I didn't tested yet from outside, so please keep me informed !

I never tested OCS under Linux... You will probably find more help on their forum. Look also on their old forum at sourceforge (read only)

As told in the announce, I didn't tested deployments as I'm not using this function (M$ GPO are better to do the job, sorry).
Maybe you'll need some more modifications... If you can make it work, just tell me how you did it and I will update my rpm.


Best regards,
Sylvain

[Jáder]

Hi

I discovered the problem with testing using command line was use the TAG.
using just /np /debub  worked!

Later I finally discoverd what was wrong: TAG is case sensitive. Must be in capital letters (TAG), do not use tag because it do not work.
Will search as bug on OCS forum and report as needed.

Discovered that external inventory is possible. Tested with Cool34!!!
Thanks.

Jáder

[cool34000]

Hi!


I'm sending right now new releases of both rpms...
Please uninstall both rpms before.
You will find them there: http://mirror.contribs.org/smeserver/contribs/sgomez/contribs/inventory

OCS 1.01-4 changelog:
- fixed Apache restarting before deleting templates when uninstalling
- fixed logrotate bug
- added templates and events to change dynamically DbPassword.
- added a reserved user for ocs
GLPI 0.68.3-2 changelog:
- fixed Apache restarting before deleting templates when uninstalling
- added templates and events to change dynamically DbPassword.
- added a reserved user for glpi

Now, you can view ocs and/or glpi's configuration by typing

Code: [Select]

config show ocs
config show glpiAs you will see, MySQL passwords are strong, but if you want to change for any reason your passwords, all you have to do is:

Code: [Select]

config setprop ocs DbPassword mynewpassword
config setprop glpi DbPassword "my other new password"

signal-event ocs-update
signal-event glpi-updatePlease remember that GLPI has OCS's password in its database (to import OCS inventories). So if you change OCS' password, you'll need to update GLPI!

Passwords will also be applyed each time you'll do a

Code: [Select]

signal-event post-upgrade
signal-event reboot

Best regards,
Sylvain

[cool34000]

Hi,

Updated the wiki pages... Enjoy!
http://wiki.contribs.org/OCS_Reports_and_GLPI

[kevinb]

Nice contrib Sylvain. Good Job!

I was wondering, if anyone knows, can either of these contribs be setup to send an email alert if any of the hardware or installed software changes and any machine?

Thanks again

Kevin

[cool34000]

Hi Kevin,

It could be possible with GLPI I think...
Go to Administration -> Setup -> Email followup
Try over there...

Else you can rise a feature request!

[cool34000]

Hi all


I'm asking a simple question which was raised by Jader:
At uninstall stage, should or should not the MySQL DataBase be dropped automatically?

By now, the database is automatically dropped at uninstall stage so you have to save your database on your own if you plan to update RPMs.


Thanks in advance!
Best regards,
Sylvain

[Franco]

Can the uninstall script ask if you want to drop it?

[Daniel B.]

Can the uninstall script ask if you want to drop it?

No, in a rpm, the scripts must be non-interactive, but you could dump the bases just before dropping them, just like a signal-event pre-backup would do

mysqldump --add-drop-tables dbname > /home/e-smith/db/mysql/dbname.dump

this way, if you install an upgraded version, the script could check if the dump exists, if it do, then, just create the database and fill it like this:

mysql dbname < /home/e-smith/db/mysql/dbname.dump

If it doesn't exists, that means it's a new install, sso just fill it with the default values. Just an idea.

[cool34000]

Thanks for the info VIP-Ire!
I will take a look ASAP!

[kevinb]

In response to my earlier question ..... I found this infomation on the OCS forum:

Q:
I would like to find out is there any way to find out if there is a change in the hardware of a server/desktop on day to day basis.  
If any desktop/sesrver is upgraded then it should inform me via an email/alert.

A:
This feature is not currently available in OCS or GLPI.
Perhaps in the future ?

[cjensen]

Thank you for your work Sylvain.  This is a very useful set of tools.

I have a few suggestions that may save you some questions from users who made similar assumptions/mistakes during setup but do not have wiki edit access.

1)immed after this line"OCS Reports' web interface can be reached at http://your-server/ocs" add the instruction to choose a language before actual login (might save someone like me from trying to maneuver without the labels ;0)

2) if you include the distribution link for download at the point under Use for ocs with/or near this text "The client side is available on all platforms." (obvious eventually, but this makes it clearer)

Again, thank you for the great contribution!!

Craig Jensen

[cool34000]

Hi,

About the flag, it's a known bug which will be fixed by OCS team in the next release.
About the availability on all platforms, it was in the links just at the end of the wiki (download section).

Anyway, I've added those 2 infos on the wiki... Thanks for your comments.

By the way here's a link to learn how to modify the wiki by your-self : http://wiki.contribs.org/Help:Editing_pages
Pretty easy isn't it?

[dmac]

Can you verify how your accessing the mysql database?
I get the following error,
Decompressing files...
Creating MySQL user and DataBase...
mysqladmin: connect to server at 'localhost' failed
error: 'Access denied for user 'root'@'localhost' (using password: YES)'
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
mysqladmin: connect to server at 'localhost' failed
error: 'Access denied for user 'root'@'localhost' (using password: YES)'
Importing MySQL DataBase...
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: YES)
Applying modifications to MySQL...
Restarting mysqld [  OK  ]
Applying modifications to httpd...

when installing.  When i connect to the mysql database at the command line, i use the "mysql -u root -p" options and have to type the password to get access.

If this doesn't work, then I will need to go the long install route.

Thanks,

Darin

[veeresh]

Hi,

Why is the link to OCS_Reports_and_GLPI  removed from the main contribs page in the wiki.


thanks

[Franco]

It's there:
http://wiki.contribs.org/Category:Howto

[veeresh]

sorry was looking for it in the contribs

thanks

veeresh

[cool34000]

Hi guys,

I've made a new RPM for OCS and GLPI. All goes in a single RPM now.
What's new?
- Inventorying SME is now possible (Agent Linux installed by default)
- GLPI has been upgraded to 0.68.3-2 (send mail security fix)
- Full SME integration
- a few bug fixes


I've modified the wiki article and put it back to Contrib section.
http://wiki.contribs.org/OCS_Reports_and_GLPI

If you're updating old RPMs, please read carefuly the update section

[Jáder]

Hi Silvain

I'm back!
I removed old 2 rpms... and after download your rpm did:

Code: [Select]



root@tigre ~# yum localinstall smeserver-inventory-tools-1-1.i386.rpm
 ==============================================================
WARNING: Additional commands may be required after running yum
==============================================================
Loading "fastestmirror" plugin
Loading "smeserver" plugin
Setting up Local Package Process
Examining smeserver-inventory-tools-1-1.i386.rpm: smeserver-inventory-tools - 1-1.i386
Marking smeserver-inventory-tools-1-1.i386.rpm to be installed
Resolving Dependencies
--> Populating transaction set with selected packages. Please wait.
---> Package smeserver-inventory-tools.i386 0:1-1 set to be updated
--> Running transaction check
Setting up repositories
Loading mirror speeds from cached hostfile
Reading repository metadata in from local files
--> Processing Dependency: ocsinventory-ipdiscover >= 1.01-2 for package: smeserver-inventory-tools
--> Processing Dependency: ocsinventory-agent >= 0.0.6-1 for package: smeserver-inventory-tools
--> Processing Dependency: monitor-edid >= 1.11-1 for package: smeserver-inventory-tools
--> Finished Dependency Resolution
Error: Missing Dependency: ocsinventory-ipdiscover >= 1.01-2 is needed by package smeserver-inventory-tools
Error: Missing Dependency: ocsinventory-agent >= 0.0.6-1 is needed by package smeserver-inventory-tools
Error: Missing Dependency: monitor-edid >= 1.11-1 is needed by package smeserver-inventory-tools
================================================================
No new rpms were installed. No additional commands are required.
================================================================


there are missing dependencies... or I forgot to add some repo  ??
Thanks

Jáder

[cool34000]

Hi Jader!

Download dependencies and install these 3 missing packages using yum.
Then install the new RPM!

[cactus]

No, in a rpm, the scripts must be non-interactive, but you could dump the bases just before dropping them, just like a signal-event pre-backup would do

mysqldump --add-drop-tables dbname > /home/e-smith/db/mysql/dbname.dump

this way, if you install an upgraded version, the script could check if the dump exists, if it do, then, just create the database and fill it like this:

mysql dbname < /home/e-smith/db/mysql/dbname.dump

If it doesn't exists, that means it's a new install, sso just fill it with the default values. Just an idea.

You can differentiate in the spec file between an removal because of an upgrade or a final removal (uninstall) I will have to lookup how the scripts have to be coded to have this feature, you can find the explanation here.

If I remember correctly you should be able to check arguments in a spec file like this:

Code: [Select]

if [ $? -eq 0 ]; then
instructions here when condition is met
else
instructions here when condition is not met
fi
BTW This is a typical question to ask on the devinfo mailinglist.

[cool34000]

Hi,

It's been some time this answer was posted...
I now use this test on %preun and %postun

Code: [Select]

if [ $1 = 0 ] ; then

[Jáder]

Hi Silvain,

I had to install those 3 rpms from dependencies.tar.gz file... and everything started to work.

BUT

I have lost my data... even using --noscripts as an option!
Not a problem at all... just testing... but may create a problem to someone else... so be warned.

Jáder

[cool34000]

Hi,

That's weird because the database is not imported if you update...
Could you be more precise on the context?

[Jáder]

Sylvain

I can provide any information you request... but you need to tell me how to provide it!

I just follow your HowTo from Wiki... but remember I have older versions installed!

Jáder

[cool34000]

Hi,

Contact me via MSN or PM...
By the way, you should have a backup of your old install in /opt/RPM_BACKUP

[luca219]

thanks 

[cactus]

Hi,

Contact me via MSN or PM...

This might benefit one user, but for future refference it would be nice if all information would be in the forums (as well).

[cactus]

Removed content, because as this was posted twice.

[Jáder]

Quote from: cool34000 on 03 November 2007, 19:36:13
Hi,

Contact me via MSN or PM...
This might benefit one user, but for future refference it would be nice if all information would be in the forums (as well).

Just to let everyone know: I´ve been working with Cool34000 to get OCS/GLPI contrib working.
When Cool34000 ask me to talk privately to him, was because we could discuss without trash the thread.

My environment is ALMOST like a test env... so something could be wrong on my side.
BUT wasn´t  my fault... I´ve got a bug... discovered and corrected by Cool3400 (Thank you!).
The latest version available is "jader-proof" !


Jáder

[cool34000]

Hi Cactus.


You're right! Sorry for not posting results here...
After all our tests, all was OK so this was a user issue due to lack of documentation. Look on the activity of the Wiki article, it has been updated many times!
And it still needs to be expanded!

This work is still in progress anyway, I'm uploading right now a new version (1-3).
The deployment function still doesn't work. See also the Talk page.

More information on the Wiki

[cactus]

Hi Cactus.


You're right! Sorry for not posting results here...
After all our tests, all was OK so this was a user issue due to lack of documentation. Look on the activity of the Wiki article, it has been updated many times!
And it still needs to be expanded!

I noticed indeed, keep up the good work. Perhaps it is worth mentioning on the top of the article that it is not complete (yet), using the {{Incomplete}} template in the wiki.

[cool34000]

Hi!

New RPM released (1-4).
This RPM fixes the missing ParserDetails.ini file of perl module XML::SAX on SME 7.2
The wiki has been updated as well

[thomasch]

Hi,

Updated the wiki pages... Enjoy!
http://wiki.contribs.org/OCS_Reports_and_GLPI

I notice in the wiki page that the OCS deployment module is 'not working' yet.

I don't have access to edit the wiki (registration not answered) so I have to share to you in this forum :

What you need is to put server certificate file in each client computer in the same directory with with ocsagent
OCS use CACert but you don't have to apply cacert.. you can use certificate already installed in you smeserver .

he is a simple howto :

ssh to your smeserver then do this

Code: [Select]

cat /etc/httpd/conf/httpd.conf |grep .crt
in my smeserver the output is

Code: [Select]

SSLCertificateFile /home/e-smith/ssl.crt/smeserver.smeserver.local.crt
then

Code: [Select]

cp /home/e-smith/ssl.crt/smeserver.smeserver.local.crt cacert.pem
copy cacert.pem to C:\Program Files\OCS Inventory Agent

don't forget to Build And Activate the Package in OCS

good luck

[cool34000]

Hi,


Thanks a lot for your answer thomasch!
Yes, we need the cacert.pem but we were focussing on the warning we're having when activating a package.
It seems that this is not a problem... Stefen Noble has given a quick howto in the Talk page

I will integrate this improvement in the next RPM.
Please ask again for Wiki access to the dev-team, and if you can write some doc about the deployment feature that would be perfect!


Regards,
Sylvain

[cool34000]

Hi guys,

New version released (1-5). Wait a few hours for miror sync...

This version fixes the deployment feature!
Wiki has been updated as well (version number and deployment documentation)

[thomasch]

Hi guys,

New version released (1-5). Wait a few hours for miror sync...

This version fixes the deployment feature!
Wiki has been updated as well (version number and deployment documentation)

New version (1-6) released, right?

[cool34000]

Hi,

Yes, I've sent it before going to bed and just updated the Wiki.
This morning when I woke up contribs.org was offline, so can't make the announce...
All looks back online now

[cool34000]

Hi,

New RPM released. There are security fix in this release, you should update ASAP!

Code: [Select]

[1-7] Security fix
       - Fix security issue on dbconfig.inc.php - We now use root:www 440
       - Fix perms on ocsreports folder and ipdiscover-util.pl (750 for both)
       - Fix problem while importing ocsagent.exe into MySQL
       - MaxUpload limit raised to 100M by default (new install only)

Regards,
Sylvain