Re: Li-f-e 13.1
Jigish Gohil <[email protected]> Thu, 12 Dec 2013 16:15:52 +0530
| Newsgroups | gmane.linux.suse.schools.usa |
|---|---|
| Message-ID | <CAJBfPaj5DO=HdEJvSHHkvoo-b5RM7Es2EoU=gjRUL0QvUbbiFg@mail.gmail.com> |
On Thu, Dec 12, 2013 at 3:16 PM, La=E9rcio de Sousa <[email protected]> w= rote: > Sorry Lars, it's not clear to me. Are you trying to run epoptes[-server] = and > epoptes-client on the same machine? Why? Any testing purposes? Since your > setup is of standalone type, you should only install epoptes in your serv= er > and epoptes-client in your clients (it could be a VM, for example). > > If you have updated epoptes package with my last additions, you need to > enable manually the systemd service unit file for epoptes-server: > > sudo systemctl enable epoptes-server.service > sudo systemctl start epoptes-server.service > > On the other hand, there's no need to enable explicitly > epoptes-client.service, since it's automatically started by NetworkManage= r > (or ifup) dispatcher scripts when network is online. > I can confirm, epoptes does not work even with client and the server on different machines. Services are running: On the server: /usr/bin/python -d -v /usr/bin/twistd --pidfile /var/run/epoptes.pid epopte= s On the client, the certificate import works: epoptes-client -c depth=3D0 C =3D AU, ST =3D Some-State, O =3D Internet Widgits Pty Ltd verify error:num=3D18:self signed certificate verify return:1 depth=3D0 C =3D AU, ST =3D Some-State, O =3D Internet Widgits Pty Ltd verify error:num=3D9:certificate is not yet valid notBefore=3DDec 12 10:25:49 2013 GMT verify return:1 depth=3D0 C =3D AU, ST =3D Some-State, O =3D Internet Widgits Pty Ltd notBefore=3DDec 12 10:25:49 2013 GMT verify return:1 DONE Successfully fetched certificate from server:789 The client service is running as well: ps ax|grep epoptes 2599 ? S 0:00 socat openssl-connect:server:789,cafile=3D/etc/epoptes/server.crt,interval=3D60,f= orever EXEC:bash -c \"exec -a epoptes-client sh\" ping server PING server (10.0.0.254) 56(84) bytes of data. 64 bytes from server (10.0.0.254): icmp_seq=3D1 ttl=3D64 time=3D0.162 ms 64 bytes from server (10.0.0.254): icmp_seq=3D2 ttl=3D64 time=3D0.132 ms 64 bytes from server (10.0.0.254): icmp_seq=3D3 ttl=3D64 time=3D0.130 ms Firewall is disabled on both machines. The clients do not show up in Epoptes "Detected clients": Got clients: None Let me know if more information is needed. -J -- To unsubscribe, e-mail: [email protected] To contact the owner, e-mail: [email protected]