[Idea] Remote registration with ssh keys

[nykroy]

Your idea

I think is best solution use ssh keys for ssh Remote registration is that posible ?

[g-bougard]

Hi @nykroy

yes, this is possible.

If you're using a windows GLPI Agent, you will probably need to use the latest nightly build.
On unix/linux, you can simply setup ssh access configuration in the ~/.ssh/config of the agent environment as you can need it from the console. This way, you can manage to use such kind of remote url: ssh://remote-host/.

[nykroy]

I will try it thanks!!

[nykroy]

Hi, how can i connect using glpi-agent 1.5 from windows to linux but using private key and passphrase?

i am trying with this command but it respond "Cant Authenticate"
glpi-agent --remote=ssh://[email protected] --logger=stderr --tasks remoteinventory -f --no-ssl-check --ca-cert-file=C:\Users\xxxx\Desktop\director_key.ppk

[g-bougard]

Hi @nykroy

first of all, don't use no-ssl-check & ca-cert-file options, they are not related to your concern. GLPI-Agent will look in a specific place for private keys to try.

Secondly, ppk is a format used by putty, this is not the more standard openssh key format. You can use puttygen to export your key in this more common format and the expected one for the library the agent is using.

Then on windows, you have to put the exported private key into the a var/.ssh subfolder of your glpi-agent installation folder. I'm not sure if you can export the key protecting it with a password as I didn't test this case. So you can export it without password and secure the file so only administrators can read it. If you export with a password protection, try to use this password a remote password like in:

glpi-agent --remote=ssh://user:[email protected] --logger=stderr --tasks remoteinventory -f --debug --debug