Package creation

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
raiden5_5
Messages: 5
Registration: June 4, 2015 - 10:27

June 4, 2015 - 10:51

Hello,
I don't know why, but for some time now I've been having a problem creating packages. I keep getting the message "WARNING No private key provided..." I've recreated the key several times (of course, I provide the path to the new certificate), and then when I try to install a package, it doesn't work.
My WAPT server is running Linux

Thank you in advance
User avatar
htouvet
WAPT Expert
Messages: 436
Registration: March 16, 2015 - 10:48
Contact :

June 4, 2015 - 11:16

Package creation uses the local configuration wapt c:\wapt\wapt-get.ini

[global]
...
private_key=c:\private\my_organization.pem
Tranquil IT
raiden5_5
Messages: 5
Registration: June 4, 2015 - 10:27

June 5, 2015 - 09:29

Thank you for your reply, and yes, indeed, I wasn't paying enough attention! :)
Thanks again!

I have another question: is it possible for a user to choose which software to install on their machine? (Perhaps with "show software status," but when I try to install software, it asks for credentials, and I don't know what they are for.)
And one last question: can one or more programs be installed while respecting user permissions?

These are really the last two things I need to know about using this software. I use it almost every day, and I think it's fantastic!

Thanks again for this great software! :D
User avatar
htouvet
WAPT Expert
Messages: 436
Registration: March 16, 2015 - 10:48
Contact :

June 5, 2015 - 09:35

You can indeed install from the local console (by default http://localhost:8088 ).
The accounts authorized for installation this way are:
- local administrators of the machine
- domain administrators
- members of a group named "waptselfservice" to be created in Active Directory.

--
I didn't understand "taking into account" the permissions?
Do you want to allow certain user groups to install certain software?
Tranquil IT
raiden5_5
Messages: 5
Registration: June 4, 2015 - 10:27

June 5, 2015 - 10:28

By "taking into account" the rights, I meant whether someone who isn't an administrator of the machine, but who can install software from the list of available software using the methods you indicated, would be able to do so.

But the solution with the "waptselfservice" group seems like a good one; do I just need to create this group?
User avatar
htouvet
WAPT Expert
Messages: 436
Registration: March 16, 2015 - 10:48
Contact :

June 5, 2015 - 11:25

Yes, you need to create the waptselfservice group on the AD and put in this group the users to whom you want to give the right to install software.
Tranquil IT
raiden5_5
Messages: 5
Registration: June 4, 2015 - 10:27

June 5, 2015 - 3:52 PM

Okay, thank you! :)
What I'd like to do is allow users to install only the software listed in the repository (available on localhost) and nothing else (so they can't install just anything). Is that possible?
User avatar
htouvet
WAPT Expert
Messages: 436
Registration: March 16, 2015 - 10:48
Contact :

June 5, 2015 - 4:14 PM

Yes, that's exactly it.
We only install WAPT packages that are signed by the admin.
We don't grant permission to install just anything.
Tranquil IT
raiden5_5
Messages: 5
Registration: June 4, 2015 - 10:27

June 5, 2015 - 4:23 PM

Sorry to be a pain, but I want to make sure I understand. :oops:

Once I create the "waptselfservice" group with Active Directory, will users only be able to install software available in the list of available packages? Because if I grant installation rights through Active Directory, they'll be able to install anything, right? Or does WAPT recognize "waptselfservice" and only allow installations of available packages?

Thanks again for your answers. :oops:
User avatar
htouvet
WAPT Expert
Messages: 436
Registration: March 16, 2015 - 10:48
Contact :

June 5, 2015 - 4:34 PM

Yes, it is indeed the local waptservice that verifies user authentication and checks whether the user is an administrator or a member of the waptselfservice group.

If so, waptservice authorizes the installation/uninstallation of WAPT packages via the local waptservice service
( http://localhost:8088/install?package=toto-firefox ).

This does not grant any other rights.
(In particular, it does not change the wapt-get command-line permissions, which require full administrator privileges.)
Tranquil IT
Locked