Re: Li-f-e 13.1

Jigish Gohil <[email protected]> Thu, 12 Dec 2013 16:15:52 +0530
Newsgroups gmane.linux.suse.schools.usa
Message-ID <CAJBfPaj5DO=HdEJvSHHkvoo-b5RM7Es2EoU=gjRUL0QvUbbiFg@mail.gmail.com>
On Thu, Dec 12, 2013 at 3:16 PM, La=E9rcio de Sousa <[email protected]> w=
rote:
> Sorry Lars, it's not clear to me. Are you trying to run epoptes[-server] =
and
> epoptes-client on the same machine? Why? Any testing purposes? Since your
> setup is of standalone type, you should only install epoptes in your serv=
er
> and epoptes-client in your clients (it could be a VM, for example).
>
> If you have updated epoptes package with my last additions, you need to
> enable manually the systemd service unit file for epoptes-server:
>
> sudo systemctl enable epoptes-server.service
> sudo systemctl start epoptes-server.service
>
> On the other hand, there's no need to enable explicitly
> epoptes-client.service, since it's automatically started by NetworkManage=
r
> (or ifup) dispatcher scripts when network is online.
>
I can confirm, epoptes does not work even with client and the server
on different machines.

Services are running:

On the server:

/usr/bin/python -d -v /usr/bin/twistd --pidfile /var/run/epoptes.pid epopte=
s

On the client, the certificate import works:

epoptes-client -c
depth=3D0 C =3D AU, ST =3D Some-State, O =3D Internet Widgits Pty Ltd
verify error:num=3D18:self signed certificate
verify return:1
depth=3D0 C =3D AU, ST =3D Some-State, O =3D Internet Widgits Pty Ltd
verify error:num=3D9:certificate is not yet valid
notBefore=3DDec 12 10:25:49 2013 GMT
verify return:1
depth=3D0 C =3D AU, ST =3D Some-State, O =3D Internet Widgits Pty Ltd
notBefore=3DDec 12 10:25:49 2013 GMT
verify return:1
DONE
Successfully fetched certificate from server:789

The client service is running as well:

ps ax|grep epoptes
 2599 ?        S      0:00 socat
openssl-connect:server:789,cafile=3D/etc/epoptes/server.crt,interval=3D60,f=
orever
EXEC:bash -c \"exec -a epoptes-client sh\"

ping server
PING server (10.0.0.254) 56(84) bytes of data.
64 bytes from server (10.0.0.254): icmp_seq=3D1 ttl=3D64 time=3D0.162 ms
64 bytes from server (10.0.0.254): icmp_seq=3D2 ttl=3D64 time=3D0.132 ms
64 bytes from server (10.0.0.254): icmp_seq=3D3 ttl=3D64 time=3D0.130 ms

Firewall is disabled on both machines.

The clients do not show up in Epoptes "Detected clients": Got clients: None

Let me know if more information is needed.

-J
-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]