Changes for page Unix Agent installieren
Last modified by Sabrina V. on 2025/11/20 07:19
Summary
-
Page properties (2 modified, 0 added, 0 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,0 +1,1 @@ 1 +Unix Agent - Content
-
... ... @@ -41,11 +41,11 @@ 41 41 42 42 The Unix Agent is installed using a Client Command in ACMP. To do this, the Client Command must first be imported and released. 43 43 44 -{{aagon.warn ingbox}}44 +{{aagon.warnungsbox}} 45 45 Installing the Unix Agent stops and removes the Linux Agent. 46 46 47 47 The ClientID used by the Linux Agent is retained and reused by the Unix Agent. 48 -{{/aagon.warn ingbox}}48 +{{/aagon.warnungsbox}} 49 49 50 50 === Import and release Client Command === 51 51 ... ... @@ -63,7 +63,7 @@ 63 63 64 64 In the dialog window that opens, click the //Execute// button. The Client Command interface opens, where you can configure the installation of the Unix Agent. 65 65 66 -[[Configuring the Unix Agent using the Client Command>>image:Unix Agent - Fallback-SICS.png||alt=“Configuring the Unix Agent using the Client Command” data-xwiki-image-style-alignment=“center”height="600" width="480"]]66 +[[Configuring the Unix Agent using the Client Command>>image:Unix Agent - Fallback-SICS.png||alt="“Configuring" data-xwiki-image-style-alignment="center" height="600" width="480"]] 67 67 68 68 = Configuring the Unix Agent = 69 69 ... ... @@ -73,7 +73,7 @@ 73 73 74 74 The Unix Agent is transferred to the target computers via SSH; valid user data must be entered accordingly. Unlike the Linux Agent, the Unix Agent transfers the scan data directly to the ACMP Server. 75 75 76 -{{aagon.warn ingsbox}}76 +{{aagon.warnungsbox}} 77 77 The user whose user data is specified as SSH credentials for the installation must be created on each of the target computers and have “sudo” rights (superuser do) there. 78 78 {{/aagon.warnungsbox}} 79 79 ... ... @@ -87,12 +87,9 @@ 87 87 88 88 You can also specify multiple fallback SICS connections in the tabs. If the primary SICS connection fails and cannot be used, an attempt is made to establish a connection to another defined SICS and to carry out the transfer via one of the fallback connections. The list of fallback SICS connections is used continuously, starting with fallback SICS #1, until a connection to one of the defined fallback SICS connections can be established or there are no more fallback connections in the list. 89 89 90 -(% class="box infomessage" %) 91 -(( 92 -[[image:https://doc.aagon.com/bin/download/XWiki/Aagon Infobox/WebHome/Information.svg||alt=“Note” height="32" width="32"]] **Note: ** 93 - 90 +{{aagon.infobox}} 94 94 If the connection to one of the defined fallback SICS could be established successfully, the connection is maintained until the next restart. 95 - )))92 +{{/aagon.infobox}} 96 96 97 97 === Options === 98 98 ... ... @@ -110,11 +110,9 @@ 110 110 111 111 To install the Unix Agent as a permanent resource, you can execute the agent in the //Agent Installation// mode. The Unix Agent is now transferred to the target computer and registered as a service. Following installation, the agent starts automatically and obtains its configuration from ACMP within 10 minutes. The agent is now entered as a client in ACMP and contains the basic client details. The execution file can be found under the path: ##/usr/local/sbin/aagon/ACMPUnixAgent/## 112 112 113 -The agent also uses another directory to store various resources that are relevant to the agent. This directory can be found under the path:## /etc/aagon/ACMPUnixAgent/##110 +The agent also uses another directory to store various resources that are relevant to the agent. This directory can be found under the path:## /etc/aagon/ACMPUnixAgent/## 114 114 115 -(( 116 116 The Agent Tasks templates are used to execute the scanners. These can be used in exactly the same way as with the ACMP Windows Agent (Container). The following jobs are currently taken into account within the Agent Tasks: 117 -))) 118 118 119 119 * System scanner 120 120 * Software scanner ... ... @@ -128,7 +128,7 @@ 128 128 129 129 In the //Activated Scanners// area, you can disable individual scanners. This is useful if you do not need certain information or if problems occur with one or more scanners. 130 130 131 -=== CC Settings === 126 +=== Client Command Settings === 132 132 133 133 By clicking the checkbox in the CC Settings area, you can specify that no confidential information (e.g., passwords) is stored in the Client Command. 134 134 ... ... @@ -137,7 +137,7 @@ 137 137 After executing the Client Command, a dialog window will appear informing you whether the Client Command was executed successfully. The number of processed Clients is displayed, along with information on whether connection errors (SSH errors) were detected. 138 138 139 139 {{figure}} 140 -[[image:CC_Erfolgsmeldung.png||alt=“Success message about installation of the Unix Agent”data-xwiki-image-style-alignment=“center”]]135 +[[image:CC_Erfolgsmeldung.png||alt="“Success" data-xwiki-image-style-alignment="“center”"]] 141 141 142 142 {{figureCaption}} 143 143 Success message about installation of the Unix Agent ... ... @@ -146,86 +146,96 @@ 146 146 147 147 = Logging = 148 148 149 - Sollte esbeiderAusführungvomUnix Agentzu Verbindungsfehlerkommen,werdendieseFehlerin dieDatei##SSH_Errors.log##undindasLogdesClient Commands geschrieben.DieDateifindenSie entweder imStandard-Ordner ##C:\Logs## oder indemVerzeichnis,dasSie fürdas LoggingdesUnix Agents angegeben haben.144 +If connection errors occur during the execution of the Unix Agent, these errors are written to the file ##SSH_Errors.log## and to the log of the Client Command. You can find the file either in the default folder ##C:\Logs## or in the directory you specified for logging the Unix Agent. 150 150 151 151 {{aagon.infobox}} 152 - DieseVerbindungsfehlerführennichtzueinemAbbruchdesClient Commands.DaherwerdendieseFehler nicht angezeigt,wennSie dieLogging-Einstellung //NurbeiFehlern//fürdasConsolen-Logausgewählt haben.147 +These connection errors do not cause the Client Command to be terminated. Therefore, these errors are not displayed if you have selected the logging setting //Only on errors //for the console log. 153 153 {{/aagon.infobox}} 154 154 155 - FallsSie alsonacheinerAusführungdesClient CommandsdirektFeedbacküber möglicheVerbindungsfehlerhabenmöchte,sollte Siefürdie Logging-Einstellungdes Consolen-Logsentweder die Option//Immer//wählenoderin derDatei##SSH_Errors.log##nachschauen.150 +If you would like to receive immediate feedback about possible connection errors after executing the Client Command, you should either select the //Always //option for the console log settings or check the file ##SSH_Errors.log##. 156 156 157 157 = Troubleshooting = 158 158 159 - ImFolgendenfindenSie LösungenzuverschiedenenProblemen,diebeiderInstallationdesUnix Agentauftreten können.154 +Below you will find solutions to various problems that may occur during the installation of the Unix Agent. 160 160 161 161 ---- 162 162 163 -**Symptom:** DerUnix Agentkonntenichtaufden Clientsverteiltwerdenundim Log werdenkeineFehlerangezeigt.158 +**Symptom:** The Unix Agent could not be deployed on the Clients and no errors are displayed in the log. 164 164 165 -** Ursache: **DerUnix Agentistnochgarnicht alsServicevorhanden,daherkönnen auch keineFehlerindas Loggeschriebenwerden.160 +**Cause: **The Unix Agent does not yet exist as a service, so no errors can be written to the log. 166 166 167 -** Maßnahme: **BeginnenSiedie Fehlersucheim journalctlIhresSystems undsuchenSiedortnach EinträgenzurfehlgeschlagenenInstallationdesUnix Agents.162 +**Action: **Start troubleshooting in your system's journalctl and find entries for the failed installation of the Unix Agent. 168 168 169 169 ---- 170 170 171 -**Symptom:** Nach derVerteilungdesUnix AgentsmittelsdesClient Commandstaucht derUnix-Client nicht in ACMPauf.166 +**Symptom:** After distributing the Unix Agent using the Client Command, the Unix client does not appear in ACMP. 172 172 173 -** Ursache:**EstrateinFehlerbei der AusführungdesClient Commands auf,der aberaufgrundder Einstellungennicht direkt ersichtlich war.168 +**Cause:** An error occurred during the execution of the Client Command, but was not immediately apparent due to the settings. 174 174 175 -** Maßnahme:**AktivierenSiein den EigenschaftendesClient CommandsimPlugin //Optionen//inderCombobox //Consolen-Loganzeigen//dieOption //NurbeiFehlern//undbestätigenSieden176 - Dialogmit //OK//.Nacheiner erneutenAusführungdesClient Commands, solltenunimFalleeinesFehlerseinConsolen-Logangezeigtwerden,dasggf.Aufschluss überdieUrsachedes Problems liefert.170 +**Action:** In the properties of the Client Command in the plugin //Options //in the Combobox //Show console log// enable the option //Only on errors// and confirm the 171 +dialog with //OK//. After executing the Client Command again, a console log should now be displayed in the event of an error, which may provide information about the cause of the problem. 177 177 178 - Fallsdie Unix-Systemeimmernochnicht imACMPauftauchen,kanndiesvieleGründehaben.Deswegenempfiehltessich,dasLogging fürdenAgentunddenSICSzuaktivieren.Anschließendsolltemandie KettevonAnfang bis Endedurchgehen.173 +If the Unix systems still do not appear in ACMP, there may be many reasons for this. It is therefore recommended to activate logging for the agent and the SICS. Then go through the chain from start to end. 179 179 180 180 ---- 181 181 182 -**Symptom:** Nach derVerteilungdesUnix AgentsmittelsdesClient Commandstaucht derUnix-Client nicht in ACMPauf.Im SmartInspectLog wird derFehler„Invalid input detected: endpoint"angezeigt.177 +**Symptom:** After distributing the Unix Agent using the Client Command, the Unix client does not appear in ACMP. The error “Invalid input detected: endpoint” is displayed in the SmartInspect log. 183 183 184 -** Ursache:**Es trat einFehlerbeiderVerbindungzumSICS auf,weildas Protokollggf.beiderVerbindung nichtvorangestellt wurde.DieskönnenSieimSmartInspectLog inderZeile//Application settings//erkennen: ##„SicsEndpoint: <AESB-SICS-NAME_IP>:3950“##179 +**Cause:** An error occurred during the connection to SICS because the protocol may not have been prefixed during the connection. You can see this in the SmartInspect log in the row //Application settings//: ##“SicsEndpoint: <AESB-SICS-NAME_IP>:3950”## 185 185 186 -** Maßnahme:**StellenSiesicher,dassalsSICS-Endpoint ##wss:~/~/<AESB-SICS-NAME_IP>:3950##verwendetwird und nichtnur##<AESB-SICS-NAME_IP>:3950##181 +**Action:** Make sure that the SICS endpoint is set to ##wss:~/~/<AESB-SICS-NAME_IP>:3950## and not just ##<AESB-SICS-NAME_IP>:3950## 187 187 188 188 ---- 189 189 190 -**Symptom:** DerUnix Agentliegtnicht aufdemZielsystem ander Stelle: ##/usr/local/sbin/aagon/ACMPUnixAgent.##185 +**Symptom:** The Unix Agent is not located on the target system at the following location: ##/usr/local/sbin/aagon/ACMPUnixAgent.## 191 191 192 -** Ursache:**DiesemProblemkönnen mehrere Ursachenzugrundeliegen:187 +**Cause:** There may be several causes for this problem: 193 193 194 -* DerLoginuserdarf sichnichtper sudoRoot-Rechteverschaffen.195 -* DerUserbesitztRoot-Rechte,aberRootdarf sichnichtperSSHeinloggen.196 -* DerUserbesitztRoot-RechteundRootdarf sichnichtperSSHeinloggen,aberderSSH-Daemonläuftnichtordnungsgemäß.189 +* The login user is not allowed to obtain root rights via sudo. 190 +* The user has root rights, but root is not allowed to log in via SSH. 191 +* The user has root rights and root is not allowed to log in via SSH, but the SSH daemon is not running properly. 197 197 198 -** Maßnahme:**StellenSiesicher,dassderSSH-BenutzersichperSSHeinloggendarfundsichRoot-Rechteverschaffen kann.193 +**Action:** Make sure that the SSH user is allowed to log in via SSH and can obtain root rights. 199 199 200 200 ---- 201 201 202 -**Symptom:** DerUnixAgent startet,erreichtabernichtdenStatus//running//.197 +**Symptom:** The Unix agent starts but does not reach the //running// status. 203 203 204 -** Ursache:**DerAgentscheintkeineVerbindungzumSICSzu bekommen.199 +**Cause:** The agent does not seem to be able to connect to SICS. 205 205 206 -** Maßnahme:**ÜberprüfenSie,ob dieNetzwerkverbindungzumSICSfunktioniert.Falls diesdasProblem nichtbehebt,aktivierenSiedasClient Commanddas Logging und führenSiedie Aktionerneut durch.SuchenSie anschließendinderAusgabe nachFehlermeldungen.201 +**Action:** Check whether the network connection to SICS is working. If this does not solve the problem, enable logging in the Client Command and perform the action again. Then look for error messages in the output. 207 207 208 208 ---- 209 209 210 -**Symptom:** DerAgentwirdbeimSystemstartnichtmitgestartet.205 +**Symptom:** The agent is not started at system start. 211 211 212 -** Ursache:**BeimEinrichtenoder StartendesDienstesistetwasfehlgeschlagen.207 +**Cause:** Something went wrong when setting up or starting the service. 213 213 214 -** Maßnahme:**FührenSiedasClient CommandzurInstallationdesUnix-Agenterneutaus.209 +**Action:** Execute the Client Command for installing the Unix Agent again. 215 215 216 216 ---- 217 217 218 -**Symptom:** DerUnix Agentläuft,aberderentsprechendeUnix-Clienttauchtnicht ineinerACMP-Abfrageauf.213 +**Symptom:** The Unix Agent is running, but the corresponding Unix client does not appear in an ACMP query. 219 219 220 -** Ursache:**DerSICSkann dieScan-DatendesUnix Agentennichtan denACMP Serverweiterleiten,weildieVerbindung nicht verfügbarist.215 +**Cause:** The SICS cannot forward the scan data of the Unix Agent to the ACMP Server because the connection is not available. 221 221 222 -** Maßnahme:**PrüfenSie inden EinstellungenderACMP Console,ob die SICS-VerbindungdesACMP Serversnoch funktioniert(im Plugin ACMP Server / SICS-Verbindung)undobdieCheckbox fürden Zugriff vonSICS-BenutzernaufdiePublic API aktiviertist.WeitereInformationenzu diesemProblemfindenSieggf.imLogdesACMP ServersoderdesUnix Agents.217 +**Action:** Check in the ACMP Console settings whether the SICS connection of the ACMP Server is still working (in the ACMP Server / SICS connection plugin) and whether the checkbox for SICS users to access the public API is activated. Further information on this problem can be found in the log of the ACMP Server or the Unix Agent. 223 223 224 224 ---- 225 225 226 -**Symptom:** In einer ACMP-Abfrage taucht derUnix-Client auf, aberessindkeineScandatenverfügbar.221 +**Symptom:** The Unix client appears in an ACMP query, but no scan data is available. 227 227 228 -** Ursache:**Beider Installationwirdzwischen 2und 10Minutengewartet, bismittels einer Anfragean den ACMP Server diefürdiesenUnix-ClientgetätigtenScan-Einstellungengeholtwerden.223 +**Cause:** During installation, the system waits between 2 and 10 minutes until the scan settings for this Unix client are retrieved by sending a request to the ACMP Server. 229 229 230 -**Maßnahme: **Warten Sie ggf. noch etwas länger, bis die Scandaten geladen wurden. Falls nach deutlich mehr als 10 Minuten immer noch keine Scandaten auftauchen, sollten Sie das Logging für alle beteiligten Komponenten aktivieren und die gesamte Kette von Anfang bis Ende auf Fehler prüfen. 231 -{{/aagon.warning}} 225 +**Action: **If necessary, wait a little longer until the scan data has been loaded. If no scan data appears after significantly more than 10 minutes, you should enable logging for all components involved and check the entire chain from start to end for errors. 226 + 227 += Administration of Linux and MacOS Clients = 228 + 229 +Previously, clients running Linux or macOS could only be detected and inventoried with the Unix Agent. They could not, however, be administered, and no shell scripts or jobs could be executed on these clients. Now, newly detected Linux and macOS clients can be managed if inventoried using the Unix Agent. This also enables the automated, time-controlled execution of Unix scripts as jobs. For more info, see the section [[Unix Scripts>>doc:ACMP.68.ACMP-Solutions.Desktop Automation.Unix Scripts.WebHome]]. 230 + 231 +(% class="box infomessage" %) 232 +((( 233 +[[image:https://doc.aagon.com/bin/download/XWiki/Aagon Infobox/WebHome/Information.svg||alt="Hinweis" height="32" width="32"]] **Note: ** 234 + 235 + All Linux and MacOS clients that are registered with Unix Agent version 1.10 or older cannot be managed. To make your Linux or MacOS clients manageable, register them again via the Unix Agent. 236 +)))

