Changes for page Unix Agent installieren

Summary

• Page properties (3 modified, 0 added, 0 removed)

Details

Page properties

Title

...	...	@@ -1,1 +1,0 @@
1		-Unix Agent

Author

...	...	@@ -1,1 +1,1 @@
1		-XWiki.SV
	1	+XWiki.jklein

Content

...	...	@@ -3,14 +3,6 @@
3	3	(% class="wikigeneratedid" %)
4	4	The Unix Agent is the completely renewed and technically revised further development of the Linux and Mac agents. The agent can be deployed and installed without Python using a supplied Client Command. The inventory data is transmitted to the ACMP Server in full and updated.
5	5
6		-{{aagon.infobox}}
7		-If you use Unix clients that are not connected to the network, you can inventory them using the [[Unix Offline Scanner>>doc:ACMP.69.Arbeiten mit der ACMP Console.Clients erfassen.Offline Scanner.WebHome||anchor="“HRunUnixOfflineScanner”"]].
8		-{{/aagon.infobox}}
9		-
10		-{{aagon.versionierungsbox}}
11		-Please note that the assignment of a maintenance window profile to containers with Unix agents is only supported in its full form starting with AESB version 1.12. Additionally, creating a maintenance window profile is possible starting with ACMP version 6.9.
12		-{{/aagon.versionierungsbox}}
13		-
14	14	= Installation requirements =
15	15
16	16	There are several requirements for you and your system for installing the Unix Agent.
...	...	@@ -39,6 +39,10 @@
39	39	* Linux and MacOS Clients must be able to reach SICS via Rest (any firewalls must allow port 3950).
40	40	* Firewall settings for SICS must be customizable if necessary.
41	41
	34	+{{aagon.warnungsbox}}
	35	+If you want to install the Unix agent on MacOS devices with an M1 or M2 chip, you must first install the //Rosetta 2 //framework on your MacOS devices. For more information, see [[Apple Support.>>https://support.apple.com/de-de/102527]]
	36	+{{/aagon.warnungsbox}}
	37	+
42	42	= Installation with the Client Command =
43	43
44	44	An existing SICS connection to the ACMP server is required to install the Unix Agent. If you have not yet configured a SICS connection, you must do so first. Instructions for configuring the SICS connection can be found in the section [[Configuring the SICS connection>>doc:AESB.19.AESB installieren, konfigurieren und aktualisieren.SICS-Verbindung konfigurieren.WebHome]].
...	...	@@ -45,11 +45,11 @@
45	45
46	46	The Unix Agent is installed using a Client Command in ACMP. To do this, the Client Command must first be imported and released.
47	47
48		-{{aagon.warnungsbox}}
	44	+{{aagon.warning box}}
49	49	Installing the Unix Agent stops and removes the Linux Agent.
50	50
51	51	The ClientID used by the Linux Agent is retained and reused by the Unix Agent.
52		-{{/aagon.warnungsbox}}
	48	+{{/aagon.warning box}}
53	53
54	54	=== Import and release Client Command ===
55	55
...	...	@@ -57,12 +57,8 @@
57	57
58	58	{{{ACMP Unix Agent verteilen & Inventory__{1F5A4238-731B-44B6-84F0-3EFB8F2D3222}.sim}}}
59	59
60		-For information on how to import and release a Client Command in ACMP, refer to the section [[Create Client Commands>>doc:ACMP.67.ACMP-Solutions.Client Commands.Client Command erstellen.WebHome||anchor="HImport"]].
	56	+For information on how to import and release a Client Command in ACMP, refer to the section [[Create Client Commands>>doc:ACMP.67.ACMP-Solutions.Client Commands.Client Command erstellen.WebHome||anchor="HImport"]] .
61	61
62		-{{aagon.warnungsbox}}
63		-To ensure that clients are properly detected and can be managed, you must use a version of the Unix Agent that is compatible with your ACMP version. Otherwise, your Linux and macOS clients will not be detected as manageable clients.
64		-{{/aagon.warnungsbox}}
65		-
66	66	=== Execute Client Command ===
67	67
68	68	After you have released the Client Command, you can execute it.
...	...	@@ -71,7 +71,7 @@
71	71
72	72	In the dialog window that opens, click the //Execute// button. The Client Command interface opens, where you can configure the installation of the Unix Agent.
73	73
74		-[[Configuring the Unix Agent using the Client Command>>image:Unix Agent - Fallback-SICS.png||alt="“Configuring" data-xwiki-image-style-alignment="center" height="600" width="480"]]
	66	+[[Configuring the Unix Agent using the Client Command>>image:Unix Agent - Fallback-SICS.png||alt=“Configuring the Unix Agent using the Client Command” data-xwiki-image-style-alignment=“center” height="600" width="480"]]
75	75
76	76	= Configuring the Unix Agent =
77	77
...	...	@@ -81,7 +81,7 @@
81	81
82	82	The Unix Agent is transferred to the target computers via SSH; valid user data must be entered accordingly. Unlike the Linux Agent, the Unix Agent transfers the scan data directly to the ACMP Server.
83	83
84		-{{aagon.warnungsbox}}
	76	+{{aagon.warningsbox}}
85	85	The user whose user data is specified as SSH credentials for the installation must be created on each of the target computers and have “sudo” rights (superuser do) there.
86	86	{{/aagon.warnungsbox}}
87	87
...	...	@@ -91,29 +91,16 @@
91	91
92	92	=== Specify SICS credentials ===
93	93
94		-To perform the installation of the Unix Agent on the target computers, you must enter your SICS session data.
	86	+To install the Unix Agent on the target computers, you must specify your SICS session data. The specified endpoint must be in the format //wss:~/~/ipaddress:port//. Please note that all target computers must have access to this endpoint. You assigned the continuing user data to the operator during the AESB installation.
95	95
96		-**SICS user**
	88	+You can also specify multiple fallback SICS connections in the tabs. If the primary SICS connection fails and cannot be used, an attempt is made to establish a connection to another defined SICS and to carry out the transfer via one of the fallback connections. The list of fallback SICS connections is used continuously, starting with fallback SICS #1, until a connection to one of the defined fallback SICS connections can be established or there are no more fallback connections in the list.
97	97
98		-For the SICS user, you can create an AESB user with minimal permissions. This user must be created in the AESB console. For more info, see the section [[managing AESB users>>https://doc.aagon.com/bin/view/AESB/111/Workspaces/Benutzer/#HBenutzerverwalten]].
	90	+(% class="box infomessage" %)
	91	+((
	92	+[[image:https://doc.aagon.com/bin/download/XWiki/Aagon Infobox/WebHome/Information.svg||alt=“Note” height="32" width="32"]] **Note: **
99	99
100		-**SICS server**
101		-
102		-The endpoint must be specified in the format “wss:~/~/server:port”, for example:
103		-
104		-* wss:~/~/ipaddress:port
105		-* wss:~/~/hostname:port
106		-* wss:~/~/FQHN:port (Fully Qualified Host Name)
107		-
108		-Please note that all target computers require access to this endpoint. You assigned the additional user credentials for the operator during the AESB installation.
109		-
110		-**SICS Fallbacks**
111		-
112		-In the tabs, you can specify multiple fallback SICS connections. If the primary SICS connection fails and cannot be used, the system will attempt to establish a connection to another defined SICS and perform the transfer via one of the fallback connections. The list of fallback SICS connections is used continuously, starting with Fallback SICS #1, until a connection to one of the defined fallback SICS connections has been established or there are no continuing fallback connections remaining in the list.
113		-
114		-{{aagon.infobox}}
115	115	If the connection to one of the defined fallback SICS could be established successfully, the connection is maintained until the next restart.
116		-{{/aagon.infobox}}
	95	+)))
117	117
118	118	=== Options ===
119	119
...	...	@@ -131,9 +131,11 @@
131	131
132	132	To install the Unix Agent as a permanent resource, you can execute the agent in the //Agent Installation// mode. The Unix Agent is now transferred to the target computer and registered as a service. Following installation, the agent starts automatically and obtains its configuration from ACMP within 10 minutes. The agent is now entered as a client in ACMP and contains the basic client details. The execution file can be found under the path: ##/usr/local/sbin/aagon/ACMPUnixAgent/##
133	133
134		-The agent also uses another directory to store various resources that are relevant to the agent. This directory can be found under the path:## /etc/aagon/ACMPUnixAgent/##
	113	+The agent also uses another directory to store various resources that are relevant to the agent. This directory can be found under the path:## /etc/aagon/ACMPUnixAgent/##
135	135
	115	+((
136	136	The Agent Tasks templates are used to execute the scanners. These can be used in exactly the same way as with the ACMP Windows Agent (Container). The following jobs are currently taken into account within the Agent Tasks:
	117	+)))
137	137
138	138	* System scanner
139	139	* Software scanner
...	...	@@ -147,7 +147,7 @@
147	147
148	148	In the //Activated Scanners// area, you can disable individual scanners. This is useful if you do not need certain information or if problems occur with one or more scanners.
149	149
150		-=== Client Command Settings ===
	131	+=== CC Settings ===
151	151
152	152	By clicking the checkbox in the CC Settings area, you can specify that no confidential information (e.g., passwords) is stored in the Client Command.
153	153
...	...	@@ -156,7 +156,7 @@
156	156	After executing the Client Command, a dialog window will appear informing you whether the Client Command was executed successfully. The number of processed Clients is displayed, along with information on whether connection errors (SSH errors) were detected.
157	157
158	158	{{figure}}
159		-[[image:CC_Erfolgsmeldung.png||alt="“Success" data-xwiki-image-style-alignment="“center”"]]
	140	+[[image:CC_Erfolgsmeldung.png||alt=“Success message about installation of the Unix Agent” data-xwiki-image-style-alignment=“center”]]
160	160
161	161	{{figureCaption}}
162	162	Success message about installation of the Unix Agent
...	...	@@ -165,104 +165,86 @@
165	165
166	166	= Logging =
167	167
168		-If connection errors occur during the execution of the Unix Agent, these errors are written to the file ##SSH_Errors.log## and to the log of the Client Command. You can find the file either in the default folder ##C:\Logs## or in the directory you specified for logging the Unix Agent.
	149	+Sollte es bei der Ausführung vom Unix Agent zu Verbindungsfehler kommen, werden diese Fehler in die Datei ##SSH_Errors.log## und in das Log des Client Commands geschrieben. Die Datei finden Sie entweder im Standard-Ordner ##C:\Logs## oder in dem Verzeichnis, das Sie für das Logging des Unix Agents angegeben haben.
169	169
170	170	{{aagon.infobox}}
171		-These connection errors do not cause the Client Command to be terminated. Therefore, these errors are not displayed if you have selected the logging setting //Only on errors //for the console log.
	152	+Diese Verbindungsfehler führen nicht zu einem Abbruch des Client Commands. Daher werden diese Fehler nicht angezeigt, wenn Sie die Logging-Einstellung //Nur bei Fehlern //für das Consolen-Log ausgewählt haben.
172	172	{{/aagon.infobox}}
173	173
174		-If you would like to receive immediate feedback about possible connection errors after executing the Client Command, you should either select the //Always //option for the console log settings or check the file ##SSH_Errors.log##.
	155	+Falls Sie also nach einer Ausführung des Client Commands direkt Feedback über mögliche Verbindungsfehler haben möchte, sollte Sie für die Logging-Einstellung des Consolen-Logs entweder die Option //Immer //wählen oder in der Datei ##SSH_Errors.log## nachschauen.
175	175
176	176	= Troubleshooting =
177	177
178		-Below you will find solutions to various problems that may occur during the installation of the Unix Agent.
	159	+Im Folgenden finden Sie Lösungen zu verschiedenen Problemen, die bei der Installation des Unix Agent auftreten können.
179	179
180	180	----
181	181
182		-**Symptom:** The Unix Agent could not be deployed on the Clients and no errors are displayed in the log.
	163	+**Symptom:** Der Unix Agent konnte nicht auf den Clients verteilt werden und im Log werden keine Fehler angezeigt.
183	183
184		-**Cause: **The Unix Agent does not yet exist as a service, so no errors can be written to the log.
	165	+**Ursache: **Der Unix Agent ist noch gar nicht als Service vorhanden, daher können auch keine Fehler in das Log geschrieben werden.
185	185
186		-**Action: **Start troubleshooting in your system's journalctl and find entries for the failed installation of the Unix Agent.
	167	+**Maßnahme: **Beginnen Sie die Fehlersuche im journalctl Ihres Systems und suchen Sie dort nach Einträgen zur fehlgeschlagenen Installation des Unix Agents.
187	187
188	188	----
189	189
190		-**Symptom:** After distributing the Unix Agent using the Client Command, the Unix client does not appear in ACMP.
	171	+**Symptom:** Nach der Verteilung des Unix Agents mittels des Client Commands taucht der Unix-Client nicht in ACMP auf.
191	191
192		-**Cause:** An error occurred during the execution of the Client Command, but was not immediately apparent due to the settings.
	173	+**Ursache:** Es trat ein Fehler bei der Ausführung des Client Commands auf, der aber aufgrund der Einstellungen nicht direkt ersichtlich war.
193	193
194		-**Action:** In the properties of the Client Command in the plugin //Options //in the Combobox //Show console log// enable the option //Only on errors// and confirm the
195		-dialog with //OK//. After executing the Client Command again, a console log should now be displayed in the event of an error, which may provide information about the cause of the problem.
	175	+**Maßnahme:** Aktivieren Sie in den Eigenschaften des Client Commands im Plugin //Optionen //in der Combobox //Consolen-Log anzeigen// die Option //Nur bei Fehlern// und bestätigen Sie den
	176	+Dialog mit //OK//. Nach einer erneuten Ausführung des Client Commands, sollte nun im Falle eines Fehlers ein Consolen-Log angezeigt werden, das ggf. Aufschluss über die Ursache des Problems liefert.
196	196
197		-If the Unix systems still do not appear in ACMP, there may be many reasons for this. It is therefore recommended to activate logging for the agent and the SICS. Then go through the chain from start to end.
	178	+Falls die Unix-Systeme immer noch nicht im ACMP auftauchen, kann dies viele Gründe haben. Deswegen empfiehlt es sich, das Logging für den Agent und den SICS zu aktivieren.  Anschließend sollte man die Kette von Anfang bis Ende durchgehen.
198	198
199	199	----
200	200
201		-**Symptom:** After distributing the Unix Agent using the Client Command, the Unix client does not appear in ACMP. The error “Invalid input detected: endpoint” is displayed in the SmartInspect log.
	182	+**Symptom:** Nach der Verteilung des Unix Agents mittels des Client Commands taucht der Unix-Client nicht in ACMP auf. Im SmartInspect Log wird der Fehler „Invalid input detected: endpoint"  angezeigt.
202	202
203		-**Cause:** An error occurred during the connection to SICS because the protocol may not have been prefixed during the connection. You can see this in the SmartInspect log in the row //Application settings//: ##“SicsEndpoint: <AESB-SICS-NAME_IP>:3950”##
	184	+**Ursache:** Es trat ein Fehler bei der Verbindung zum SICS auf, weil das Protokoll ggf. bei der Verbindung nicht vorangestellt wurde. Dies können Sie im SmartInspect Log in der Zeile //Application settings// erkennen: ##„SicsEndpoint: <AESB-SICS-NAME_IP>:3950“##
204	204
205		-**Action:** Make sure that the SICS endpoint is set to ##wss:~/~/<AESB-SICS-NAME_IP>:3950## and not just ##<AESB-SICS-NAME_IP>:3950##
	186	+**Maßnahme:** Stellen Sie sicher, dass als SICS-Endpoint ##wss:~/~/<AESB-SICS-NAME_IP>:3950## verwendet wird und nicht nur ##<AESB-SICS-NAME_IP>:3950##
206	206
207	207	----
208	208
209		-**Symptom:** The Unix Agent is not located on the target system at the following location: ##/usr/local/sbin/aagon/ACMPUnixAgent.##
	190	+**Symptom:** Der Unix Agent liegt nicht auf dem Zielsystem an der Stelle: ##/usr/local/sbin/aagon/ACMPUnixAgent.##
210	210
211		-**Cause:** There may be several causes for this problem:
	192	+**Ursache:** Diesem Problem können mehrere Ursachen zugrunde liegen:
212	212
213		-* The login user is not allowed to obtain root rights via sudo.
214		-* The user has root rights, but root is not allowed to log in via SSH.
215		-* The user has root rights and root is not allowed to log in via SSH, but the SSH daemon is not running properly.
	194	+* Der Loginuser darf sich nicht per sudo Root-Rechte verschaffen.
	195	+* Der User besitzt Root-Rechte, aber Root darf sich nicht per SSH einloggen.
	196	+* Der User besitzt Root-Rechte und Root darf sich nicht per SSH einloggen, aber der SSH-Daemon läuft nicht ordnungsgemäß.
216	216
217		-**Action:** Make sure that the SSH user is allowed to log in via SSH and can obtain root rights.
	198	+**Maßnahme:** Stellen Sie sicher, dass der SSH-Benutzer sich per SSH einloggen darf und sich Root-Rechte verschaffen kann.
218	218
219	219	----
220	220
221		-**Symptom:** The Unix agent starts but does not reach the //running// status.
	202	+**Symptom:** Der Unix Agent startet, erreicht aber nicht den Status //running//.
222	222
223		-**Cause:** The agent does not seem to be able to connect to SICS.
	204	+**Ursache:** Der Agent scheint keine Verbindung zum SICS zu bekommen.
224	224
225		-**Action:** Check whether the network connection to SICS is working. If this does not solve the problem, enable logging in the Client Command and perform the action again. Then look for error messages in the output.
	206	+**Maßnahme:** Überprüfen Sie, ob die Netzwerkverbindung zum SICS funktioniert. Falls dies das Problem nicht behebt, aktivieren Sie das Client Command das Logging und führen Sie die Aktion erneut durch. Suchen Sie anschließend in der Ausgabe nach Fehlermeldungen.
226	226
227	227	----
228	228
229		-**Symptom:** The agent is not started at system start.
	210	+**Symptom:** Der Agent wird beim Systemstart nicht mit gestartet.
230	230
231		-**Cause:** Something went wrong when setting up or starting the service.
	212	+**Ursache:** Beim Einrichten oder Starten des Dienstes ist etwas fehlgeschlagen.
232	232
233		-**Action:** Execute the Client Command for installing the Unix Agent again.
	214	+**Maßnahme:** Führen Sie das Client Command zur Installation des Unix-Agent erneut aus.
234	234
235	235	----
236	236
237		-**Symptom:** The Unix Agent is running, but the corresponding Unix client does not appear in an ACMP query.
	218	+**Symptom:** Der Unix Agent läuft, aber der entsprechende Unix-Client taucht nicht in einer ACMP-Abfrage auf.
238	238
239		-**Cause:** The SICS cannot forward the scan data of the Unix Agent to the ACMP Server because the connection is not available.
	220	+**Ursache:** Der SICS kann die Scan-Daten des Unix Agenten nicht an den ACMP Server weiterleiten, weil die Verbindung nicht verfügbar ist.
240	240
241		-**Action:** Check in the ACMP Console settings whether the SICS connection of the ACMP Server is still working (in the ACMP Server / SICS connection plugin) and whether the checkbox for SICS users to access the public API is activated. Further information on this problem can be found in the log of the ACMP Server or the Unix Agent.
	222	+**Maßnahme:** Prüfen Sie in den Einstellungen der ACMP Console, ob die SICS-Verbindung des ACMP Servers noch funktioniert (im Plugin ACMP Server / SICS-Verbindung) und ob die Checkbox für den Zugriff von SICS-Benutzern auf die Public API aktiviert ist. Weitere Informationen zu diesem Problem finden Sie ggf. im Log des ACMP Servers oder des Unix Agents.
242	242
243	243	----
244	244
245		-**Symptom:** The Unix client appears in an ACMP query, but no scan data is available.
	226	+**Symptom:** In einer ACMP-Abfrage taucht der Unix-Client auf, aber es sind keine Scandaten verfügbar.
246	246
247		-**Cause:** During installation, the system waits between 2 and 10 minutes until the scan settings for this Unix client are retrieved by sending a request to the ACMP Server.
	228	+**Ursache:** Bei der Installation wird zwischen 2 und 10 Minuten gewartet, bis mittels einer Anfrage an den ACMP Server die für diesen Unix-Client getätigten Scan-Einstellungen geholt werden.
248	248
249		-**Action: **If necessary, wait a little longer until the scan data has been loaded. If no scan data appears after significantly more than 10 minutes, you should enable logging for all components involved and check the entire chain from start to end for errors.
250		-
251		-= **Updating the Unix Agent** =
252		-
253		-Updating the Unix Agent is done in the same way as its [[installation via a Client Command.>>||anchor="HInstallationwiththeClientCommand"]]
254		-
255		-In this process, the agent is redistributed and installed on the target systems via the ACMP Console. The transfer takes place via SSH using the appropriate permissions. During execution, the existing agent is replaced by the current version and reconfigured as a service.
256		-
257		-The agent then starts automatically and takes over the existing communication with the ACMP Server.
258		-
259		-= Administration of Linux and MacOS Clients =
260		-
261		-Previously, clients running Linux or macOS could only be detected and inventoried with the Unix Agent. They could not, however, be administered, and no shell scripts or jobs could be executed on these clients. Now, newly detected Linux and macOS clients can be managed if inventoried using the Unix Agent. This also enables the automated, time-controlled execution of Unix scripts as jobs. For more info, see the section [[Unix Scripts>>doc:ACMP.68.ACMP-Solutions.Desktop Automation.Unix Scripts.WebHome]].
262		-
263		-(% class="box infomessage" %)
264		-(((
265		-[[image:https://doc.aagon.com/bin/download/XWiki/Aagon Infobox/WebHome/Information.svg||alt="Hinweis" height="32" width="32"]] **Note: **
266		-
267		- All Linux and MacOS clients that are registered with Unix Agent version 1.10 or older cannot be managed. To make your Linux or MacOS clients manageable, register them again via the Unix Agent.
268		-)))
	230	+**Maßnahme: **Warten Sie ggf. noch etwas länger, bis die Scandaten geladen wurden. Falls nach deutlich mehr als 10 Minuten immer noch keine Scandaten auftauchen, sollten Sie das Logging für alle beteiligten Komponenten aktivieren und die gesamte Kette von Anfang bis Ende auf Fehler prüfen.
	231	+{{/aagon.warning}}