I can't request inventory on the server to the agent

[krenaudUR]

Documentation

Yes, I read it

Solution search

Yes, I read it

Professional support

Yes, I know

Is your help request related to a problem?

I can't request inventory here :

The server is on GLPI 10 on debian 11. The Agent is version 1.2. The agent succeed to send to server the inventory.
Here's the configuration of the agent :

I have put "Debug" on "2" but I can't see the request of the server on the log.

I use also the following plugin :

The localhost address to force the upload of inventory work while physically on the pc with the agent on it.

So Agent > Server work
But Server > Agent doesn't work

Expected behavior

That the request of asking inventory go to agent and update the information on the server

Actions you've considered

I tried to adjust parameters on the registry but still the same problem. I read also the documentation but It seems I don't see anything about request to agent the inventory with what to do if it doesn't work.

Additional context

The agent is on a pc who is using a proxy but the address of glpi to upload the inventory has been authorised on the proxy.
The agent use a .pem to communicate with the server that is working.

I'm French so sorry if some sentences are not correct. Don't hesitate to ask me more informations or tell me if I was not clear.
Thanks

[g-bougard]

Hi @krenaudUR
you're explaining the agent is using a proxy. Does this mean it is behind a firewall from the GLPI server point of vue ?

The GLPI feature to request an inventory only works if the GLPI server can reach directly the GLPI Agent IP address on its HTTP interface port. To check if the agent is reachable, get the ip reported in GLPI for the computer where is installed the agent and try from a console to reach the address http://<IP>:62354/status URL using curl or wget on a server console. This is indeed what is done by the refresh button near "Statut de l'agent", but you'll probably obtain a clear error from the console if the agent is not reachable.

[krenaudUR]

Hi @g-bougard
GLPI is also behind a proxy. It's clearly the proxy the problem because I see that :
So when I do curl I have error that the connection it's denied by the access control. So I checked the log on the "Squid 4.6" the proxy with a grep of :62354 and all the request are denied. So I need to authorize that but I don't know what to put, because the url change because of the IP and I can't authorize this url http://"Star":62354/status because "Star" is not accepted on the proxy. Do you have and idea of what can I do ?

[dsiens]

Hello,
what I see of your registry entrie "server" i that the server is wrong

Must be : http://server/front/inventory.php

[krenaudUR]

Hello, what I see of your registry entrie "server" i that the server is wrong

Must be : http://server/front/inventory.php

Hello,
it's not wrong because I'm following the documentation when you use glpiinventory :

[dsiens]

La doc est peut être dépréciée...
La doc que j'ai suivi : https://glpi-agent.readthedocs.io/en/latest/installation/windows-command-line.html#command-line-parameters

SERVER="http://itms.acme.org/glpi/front/inventory.php"

Est ce que le poste est remonté dans ton inventaire avec ton url "server" actuelle?
Sinon, essaye quand même mon url. Chez nous ça marche comme ça.

[krenaudUR]

La doc est peut être dépréciée... Est ce que le poste et remonté dans l'inventaire avec ton url actuelle? Sinon, essaye quand même mon url. Chez nous ça marche comme ça.

Le problème n'est pas au niveau de l'url du serveur de toute façon je vois très clairement que c'est le proxy qui me bloque pour les requête Serveur > agent

maintenant faut que je trouve quel ligne acl à rajouter pour l'autoriser mais je sais pas trop encore la

[g-bougard]

@krenaudUR is right, the problem is not the server url setup on agent side. He read the right documentation and he uses /plugins/glpiinventory as he probably manually installed GlpiInventory plugin.

@krenaudUR anyway you have a proxy configuration problem from server to agent? This is nor a GLPI Agent issue nor a GLPI server issue.
So I'm closing the issue, but feel free to comment is you find a solution and in the case this can help other people.
You may also want to open a thread in the GLPI forum. Maybe people there can help too.

[krenaudUR]

So It was a network and proxy problem the proxy was set in internal but I didn't need it so I put NO_PROXY and no_proxy in /etc/environnement of the glpi server. But curl seems to ignore that. So I need to put when I try do to a command curl : "curl --noproxy "Star" http://IP:62354/status" And I see the log on the client replying with a response status 200. But I imagine on the web interface it's doing a curl classic command without argument and so It's doesn't work. Can I do something about this ? @g-bougard

[krenaudUR]

UPDATE : I found out in /glpi/src/agent.php line 607 it's telling to add a string of proxy to the command to check agent status or to force inventory of the agent if in glpi setting if there is a proxy setting defined. But I can't delete the proxy setting in glpi, because if I do that I can't reach external server like glpi network. So I have commented line 607 to 614. And nows it's working great :

[g-bougard]

Hi @krenaudUR
thank you for the update. Probably the requestAgent() method should not have to use the same proxy configuration as that proxy configuration is named "Proxy configuration for upgrade check" in "General setup" in the system config form. We should probably add a proxy configuration setup in inventory configuration which may default to the general setup one but which could be disabled or changed to another one.

[krenaudUR]

UPDATE : I found out in /glpi/src/agent.php line 607 it's telling to add a string of proxy to the command to check agent status or to force inventory of the agent if in glpi setting if there is a proxy setting defined. But I can't delete the proxy setting in glpi, because if I do that I can't reach external server like glpi network. So I have commented line 607 to 614. And nows it's working great :

EDIT : It's now line 533 to 542 in GLPI 10.0.1

[krenaudUR]

@g-bougard Hi, do you know the line that needs to be commented (in /glpi/src/agent.php) for GLPI 11 for ignoring the proxy? The line seems to have changed completely.

[g-bougard]

Hi @krenaudUR

the requestAgent() API now uses getGuzzleClient() API one from src/Toolbox.php which is shared with other GLPI parts...

The lines are now into that getGuzzleClient() API. But if you disable them, this will also impact marketplace access and few other requests.

You have now to do more clever things, like passing an option to disable the proxy only for agent requests.