[SOLVED] Launching an installation from the socket

Questions about WAPT Server / Requests and help related to the WAPT server
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
Calvibald
Messages: 13
Registration: May 20, 2019 - 4:16 p.m.

February 13, 2020 - 3:07 PM

WAPT version: 1.7.4
Server OS: CentOS 7
Console OS: Windows 10

Hello,
I'm still developing a software program, but I've encountered a problem. The software aims to allow a user managing a room (a room containing computers) to choose which software is installed in their room. The software is largely finished but has a problem: the installation doesn't start automatically after adding the package to the computer. By looking at the code, I was able to find out how the server and client communicate (socket) and that installation from the API no longer works since version 1.5. I would therefore like to know if there is a way to launch this installation from a Python module, or if I need to modify the socket so that it interprets the request, or if plugin support is planned.

Thank you.
- JEANTET Joey, development student
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

February 13, 2020 - 6:22 PM

Hi Joey,

since WAPT version 1.5, actions on workstations are handled through WebSocket connections initiated by the user's workstation. Furthermore, these actions are now also signed, like installation packages. The best way to understand how the actions are performed is to delve into the console's Python code. The issue isn't that the API no longer works, but rather that security has been tightened.

Regards,
Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Calvibald
Messages: 13
Registration: May 20, 2019 - 4:16 p.m.

February 14, 2020 - 09:09

Hello, thank you for the quick reply. So, if I understand correctly, it should be possible to create an external component that launches the installation on the workstations, provided I use the certificate in my request
- JEANTET Joey, development student
User avatar
dcardon
WAPT Expert
Messages: 1932
Registration: June 18, 2014 - 09:58
Location: Saint Sébastien sur Loire
Contact :

February 14, 2020 - 12:21

Hello Calvibald,
Calvibald wrote: Feb 14, 2020 - 9:09 AM Hello, thank you for the quick reply. So, if I understand correctly, it should be possible to create an external component that launches the installation on the workstations, provided that I use the certificate in my request.
There's nothing preventing this from working. However, from an architectural standpoint, it's important to clarify that in your scenario, the web server will become a highly sensitive asset because it will have to host the signing key.

In the WAPT security model, the signing key remains on the administrator's workstation and is never available on the server. This ensures the integrity of the workstations even if the server were to be compromised.

Sincerely,

Denis
Denis Cardon - Tranquil IT
Share your experiences on WAPT! Send us your blog and article URLs in the "Your Opinion of the forum, and we'll feature them on the WAPT
Calvibald
Messages: 13
Registration: May 20, 2019 - 4:16 p.m.

February 14, 2020 - 3:00 PM

Great, thank you! I'll specify this private key issue in the software documentation since it's quite important
- JEANTET Joey, development student
Locked