icingauser88 Trainee

  • Member since Aug 17th 2017
  • Last Activity:
Posts
19
Points
125
Profile Hits
18
  • icingauser88

    Replied to the thread Powershell Script Addon.
    Post
    i will create some powershell Script to get some advanced and individual scripts (all automatic services on Windows client or local certificate check)

    Generally i will execute my scripts.

    Thx
  • icingauser88

    Posted the thread Powershell Script Addon.
    Thread
    Hi,

    have anyone here a good howto for adding powershell script in my icinga director?

    Please help

    Thx

    Rafael
  • icingauser88

    Posted the thread Filter Windows Services.
    Thread
    Hi,

    how can i get all starttype "auto" services on my windows client?

    In default i get a list of all services and the sensor will set on critical.

    What is the recommended best practice way of monitoring services in icinga2?

    Thx

    Rafael
  • icingauser88

    Liked mcktr’s post in the thread Add Windows Client.
    Like (Post)
    The auto-signing mechanism requires, that you are able to establish a connection from your client to your master. If this is not possible you have currently two options 1) create a temporarily connection to your master while you are deploying the client…
  • icingauser88

    Like (Post)
    If you have a satellite in the middle, the satellite must know about the zones and endpoints for all clients. This is a matter of a) trust relationship (parent and child zones) and b) connection directions (endpoint port attribute, which side attempts…
  • icingauser88

    Like (Post)
    "satellite instance name" should read as "the endpoint name for your satellite, which must be same as the common name in its certificate" - if they don't match, you'll get trust errors in the logs. See the docs chapter for "naming conventions".

  • icingauser88

    Liked mcktr’s post in the thread Add Windows Client.
    Like (Post)
    1. The API is on your master server and you can configure the users in the `api-users.conf` file. Already configured users you can query with `icinga2 object list --type ApiUser`. I honestly don't know what you mean with this question, can you please…
  • icingauser88

    Liked mcktr’s post in the thread Add Windows Client.
    Like (Post)
    For me it looks like, that the certificate is still not a signed by your master. You can find the manuell certificate creation documentation here https://www.icinga.com/docs/ic…nual-certificate-creation
  • icingauser88

    Like (Post)
    Also possible. Everything is found in the docs for that too ;-)
  • icingauser88

    Liked mcktr’s post in the thread Add Windows Client.
    Like (Post)
    dnsmichi Could it not be done with the manuell certificate creation?
  • icingauser88

    Like (Post)
    Currently you need to have the client connected to the CSR autosigning master once, in order to receive a CA signed client certificate.

    Your error probably comes from a self-signed certificate and the satellite denies to trust the client on TLS…
  • icingauser88

    Liked mcktr’s post in the thread Add Windows Client.
    Like (Post)
    How does you cluster setup look like? Have you setup an endpoint for the Windows client?

    You mentioned that you use the Director, have you used the Powershell script to configure your Windows client?
  • icingauser88

    Replied to the thread Add Windows Client.
    Post
    Hi,

    i use the latest icinga agent 2.7.1 from packages.icinga....

    I have no entry for global-director on the machine.


    have anyone an idea?

    Thx

    Rafael
  • icingauser88

    Replied to the thread Add Windows Client.
    Post
    Ok thanks

    In the meantime i have add a windows client successfully.

    But is it normal that i must create manual certificates because the satellite write in the log files certificate failure. Signer is my master server (node wizard).
    When i create…
  • icingauser88

    Replied to the thread Add Windows Client.
    Post
    Thx

    i still have a question. It is necessary that the Clients added as zone and endpoint on my master? Or is it enough when i add only a host?

    Please Help

    Thx

    Rafael
  • icingauser88

    Replied to the thread Add Windows Client.
    Post
    ok thx.

    Thx Last questions which is still open:

    - How can i determine für API User from Windows agent? In Linux i can set it!
    - What is the correct instance Name for the Windows agent? satellite or the master? The master is in other network external…
  • icingauser88

    Replied to the thread Add Windows Client.
    Post
    Hi,

    now i get:

    [2017-09-28 16:25:23 +0200] warning/ApiListener: Certificate validation failed for endpoint 'olbors001.meinefirma.local': code 7: certificate signature failure
    Context:
    (0) Handling new API client Connection

    The Endpoint is…
  • icingauser88

    Replied to the thread Add Windows Client.
    Post
    Hi,

    i read the docs but i can´t find chapter for Manual signing my csr.

    Basically what is the correct way to connect a Windows Client across a satellite?
    (Zones and Enpoints)

    Thx

    Rafael
  • icingauser88

    Replied to the thread Add Windows Client.
    Post
    Hi,

    i have create only a Zone first. Endpoint create produce critical error on my master Server (can´t connect).
    The Windows Client connect to satellite Server and can't connect directly to master (VPN Connection).

    How is the properly way?

    Thx

  • icingauser88

    Posted the thread Add Windows Client.
    Thread
    Hi,

    i´d like to add a Windows Client to my icinga2 master.

    I have read the docs and the icinga Client is successfully installed. But in my Terminal i see:
    (Hidden Content)


    In Icinga2 Director i have add the Client as Zone.

    What is wrong?

    Please…