GLPI Agent 1.11 has been released.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.11

This version comes with few fixes and enhancements and here are the essential ones:

• On Windows, a fix from the community prevents overwriting of Keystore exported certificates. So these certificates are no more ignored.
• On Windows, a new ssl-keystore option is available to disable or optimize Keystore certificates export.
• Bitdefender antivirus support has been updated on Windows.
• TacticalRMM remote management inventory support has been added on MacOSX.
• Users inventory has been fixed with partial inventory used with full-inventory-postpone.
• Few updates for Hikvision devices support and Konica printers have been included in NetDiscovery and NetInventory tasks
• Deploy task won’t no more display an error when running a PowerShell script on Windows.
• Proxy server plugin will now accept Json as inventory format when glpi_protocol option is set and no GLPI server is configured.

Sobre a embalagem, aqui está o que você deve reter:

• On Windows, perl is now built with OpenSSL v3.3.2 and the libxml2 library v2.13.4 supports. 7-zip provided command is now v24.08 version.
• The Windows packaging now includes GLPI-AgentMonitor software v1.4.0 and the installer supports AGENTMONITOR_NEWTICKET_SCREENSHOT as parameter to configure if a screenshot should be done before opening a new ticket.
• The MacOSX packaging now uses OpenSSL v3.3.2.

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.11/Changes

We invite you to update your agents to take advantage of these improvements.

Fique conectado! Siga-nos nas nossas redes sociais!

GLPI Agent 1.10 has been released.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.10

This version comes with few fixes and enhancements and here are the essential ones:

• OAuth2 authentication support is now included. It will only be usable with GLPI from the release of GLPI 11. It still can be tested with the GLPI main branch nightly build.
• The next inventory run date will shift less other time still keeping a little randomization.
• The agent won’t no more reset the inventory date when started hjourly in unmanaged mode (via crontab or planified task).
• On Windows, an important fix will now prevent NetDiscovery, NetInventory and Collect tasks to block service.
• Enhancement of disks serialnumber inventory support.
• Added Cortex XDR antivirus support, even on Windows “Server”, MacOSX and Linux.
• On Windows and linux, added remote management tools inventory support for Tactical RMM.
• The p2p mode on Deploy jobs has been fixed to use agent configured port. It has also been enhanced using now the remote-workers configuration to extend the number of threads used to discover peers if set to a number higher than 10.

Important: About antivirus on Windows “Server”, in the future, we will attempt to detect them checking if a dedicated service is enabled. If you still are with an undetected antivirus case on Windows “Server”, please open a github issue to help us start its support.

Sobre a embalagem, aqui está o que você deve reter:

• On Windows, perl is now built using Gcc v13.3, OpenSSL v3.3.1 and the libxml2 library v2.13.2. The liblzma library is now built using xz v5.6.2 sources.
• The Windows packaging now includes GLPI-AgentMonitor software v1.3.1.
• The MacOSX packaging now uses OpenSSL v3.3.1.
• The Deploy task can now be installed on RockyLinux 9.
• The AppImage installer for Linux now supports the --wait option for the unmanaged mode.

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.10/Changes

We invite you to update your agents as soon as possible to take advantage of these improvements.

Fique conectado! Siga-nos nas nossas redes sociais!

GLPI Agent 1.9 has been released.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.9

This version comes first with few fixes for the MSI packaging for Windows:

• A regression in the installation of OpenSSL support could prevent communication with servers via the SSL protocol.
• the FULL_INVENTORY_POSTPONE option of MSI installer was not normally managed.

Few fixes and enhancements for inventory was integrated:

• a regression of the partial inventory involved a problem in the integration of softwares into GLPI, in particular with the new full-inventory-postpone option.
• the detection of network ports type has been enhanced on MacOSX.
• the MSSQL databases inventory on Windows has been enhanced to detect all the installed instances.
• the serialnumber detection of recent disks has been enhanced on Windows.

A new snmp-retries has been introduced to enhance network inventory when networks devices not always respond in time.

The use of user notifications of the Deploy task could involve a service crash on Windows.

The ToolBox plugin now accepts some special characters inside passwords of credentials for remote inventory.

Você pode verificar os detalhes das alterações no Changelog oficial online disponível aqui: https://github.com/glpi-project/glpi-agent/blob/1.9/Changes

We invite you to update your agents as soon as possible to take advantage of these improvements.

Follow us on our social media so you don't miss any of our news!

GLPI Agent 1.8 has been released.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.8

This version comes with a lot of changes and enhancements for the MSI packaging for Windows:

• first of all, a huge work has been done to provide the windows installer with Perl 5.38.2 using latest essential libraries version for more security, like OpenSSL 3.2.1 and libssh2 1.11.0.
• the patch for the CVE-2024-28240 security advisory is now based on a DLL library.
• only 64 bits packaging for windows is provided.
• the “Typical” installation no more includes Deploy and Collect tasks.
• 7-zip provided command is now v23.01 version.
• GLPI-AgentMonitor tool is provided in 1.3.0 version and now the installer supports AGENTMONITOR_NEWTICKET_URLto configure the GLPI url for the open new ticket option.

On the inventory side, a new feature will help you reduce the carbon footprint of your GLPI system: the full inventory postpone

• now, by default, and if your server is a GLPI 10, GLPI Agent can decide to postpone the upload of a full inventory up to 14 times, so about 2 weeks using the default configuration. Until then, the agent will upload partial inventories only containing detected changes.
• full-inventory-postpone is a new configuration parameter which value is 14 by default. Setting it to 0, it is still possible to disable this feature coming back to previous normal running.
• glpi-agent script is also supporting --full option to temporary disable the feature.

The MacOSX package only activates Inventory task by default now. You’ll have to explicitly activate any other tasks you need in a dedicated configuration file.

A lot of fixes and enhancement have also been included. Inventory, RemoteInventory, NetworkDiscovery et NetInventory tasks, but also Proxy and ToolBox plugins, are concerned. We encourage you to check all changes details in the official online Changelog available here: https://github.com/glpi-project/glpi-agent/blob/1.8/Changes

We encourage you to update your agents as soon as possible to take advantage of these improvements.

Join us on our social networks so you don't miss any of our news!

GLPI Agent 1.7.3 has been released.

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.7.3

This version essentially fixes a regression introduced in the MSI packaging for Windows in the 1.7.2 version:

• the LOCAL parameter was forced to the agent installation folder when not used. After that, local inventory was also generated even if this wasn’t required. This LOCAL configuration will be removed during this update.
• CVE-2024-28241 patch was modified to not be enabled if the installation folder and (if used) the LOCAL parameter remain under the default system folder as there’s not security issue in that case.

These updates only impact Windows installation performed with MSI packaging.

We invite you to upgrade your agents on Windows as soon as possible.

You don’t need to upgrade to 1.7.3 GLPI Agents that were not installed on Windows and which are at least in 1.7 version.

GLPI Agent 1.7.2 has been released!

Você pode baixá-lo no projeto github do Agente GLPI: https://github.com/glpi-project/glpi-agent/releases/tag/1.7.2

This version specifically fixes 2 critical security issues related to MSI packaging on windows:

• CVE-2024-28240: A local user could modify the GLPI Agent configuration to gain higher privileges.
• CVE-2024-28241: A local user could modify the GLPI-Agent installation to gain higher privileges, but only when GLPI Agent is not installed in the default installation folder.

These security issues impact all Windows installation performed with MSI packaging.

We encourage you to upgrade all these agents as soon as possible!

Anyway you don’t need to upgrade to 1.7.2 after updating to 1.7.1 if your GLPI Agent was not installed on windows with the MSI package.

Collecting inventory data from servers, network devices, and workstations across your company is a challenging task. Initially, this process requires installing agents on every computer. However, there are common obstacles. Perhaps internal policies prevent agents from being installed on all servers, or there's no centralized installation method. Sometimes, networks are isolated, making it impossible to connect to your GLPI server, or you might simply need to collect data remotely from your network.

Additionally, consider the scenario where data collection is necessary from network devices and printers. This is where the GLPI Agent becomes invaluable. Since its 1.6 version, the GLPI Agent includes a Toolbox plugin. This plugin significantly expands your capabilities, allowing for network discovery and inventory of network devices using SNMP. It also facilitates remote data collection of hosts: Windows through WinRM, Linux via SSH, and ESXi.The beauty of the GLPI Agent lies in its versatility - all these functions are integrated into a single agent, simplifying what was once a complex and multifaceted task.All you need before starting is:

1. At least 1 device with the GLPI Agent 1.6 or above installed and with access to the networks you need to scan
2. The GLPI Agent Toolbox plugin activated
3. The list of IP Ranges from the network you want to scan and collect data from

a. If you have many VLANs or want to segment the scans between tasks, you can separate the ranges following your company policies4. The list of SSH, WinRM and SNMP credentials with administration permissionsThe toolbox is not intended to be installed on insecure networks.

• Activate the basic authentication
• Set the trusted IP networks or hosts authorized to access the toolbox
• Activate SSL on the agent
• Take good care of the yaml file that is created during the configuration

After we've gathered all this information, You can follow these steps contained in the video below:

1. Activate the GLPI Agent Toolbox plugin
2. Activate the navigation bar menus

a. You will need just the 4 menus that are on the documentation:i. Credentialsii. Inventoryiii. IP Rangesiv. Scheduling3. Create the IP ranges you want to discover and inventory devices remotely4. Register the SNMP credentials of your devices5. Register the SSH credentials of your devices6. Register the ESXi credentials - if you have them7. Create the scheduling you want GLPI Agent to run - if you want to do it recurrentlya. Even if you want the task to be run just once, we must create a schedule to add to the task8. Create an Inventory taska. If you set a huge network, you need to be aware that more time will be needed for the agent to finish its job.b. threads is the number of remote devices the task will query for at the same time.i. This can be set higher to make more requests at the same time and keep the task running in a shorter time.ii. The value must be reasonable, and the right value can depend on the resources allocated to the agent.c. timeout is the number of seconds before the agent will decide a remote device is not responding.i. On a local network with devices responding quickly, it can probably be set to 1 second.ii. On devices located behind a far network or if devices can be overloaded, this may require a higher value.iii. When have SSH authentication is included, 10s is better, so the agent can wait for the device to respond.9. Run the taska. If you activate the debug of the agent to the ID 2, which is the most complete debug mode, you will be able to watch each tentative of the agent to connect to each IP of the range.In this scenario, we are collecting just information about SNMP equipments, and Linux instances using SSH. For this lab and video, we are not collecting Windows information, even though it is possible if you enable WinRM connections from the host containing the GLPI Agent Toolbox and registering a WinRM credential to the configuration of the agent.

Recursos

https://glpi-agent.readthedocs.io/en/latest/tasks/remote-inventory.htmlhttps://glpi-agent.readthedocs.io/en/latest/plugins/basic-authentication-server-plugin.htmlhttps://glpi-agent.readthedocs.io/en/latest/plugins/ssl-server-plugin.htmlhttps://glpi-agent.readthedocs.io/en/latest/plugins/toolbox-plugin.html#setupGLPI Agent Toolbox