Permissions issues with the console

Share your tips or issues concerning the WAPT Console or WAPT Agent here
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
User avatar
t.heroult
Messages: 307
Registration: December 8, 2020 - 10:13 AM

February 16, 2021 - 4:33 PM

Wapt Community: 1.8.2 (Linux)
Infrastructure: Windows 10

Hello
, When I try to create a new account to use the console (creating a new user certificate), I end up with a user who can only view the interface; they cannot change the configuration of the workstations, for example.

On the same installation, if I use my certificate, it works without any problem, so it's not a problem with the Wapt client configuration on the workstation.

What am I missing?

Sincerely,
Tom
Last edited by t.heroult on Feb 16, 2021 - 4:57 PM, edited 2 times.
Server: WAPT Enterprise 2.6.1.17786 on Debian
Consoles: Windows 10 & 11
Infrastructure: Windows

Did you know? When parrotfish undergo smoltification, their osmoregulation mechanism is reversed!
User avatar
htouvet
WAPT Expert
Messages: 436
Registration: March 16, 2015 - 10:48
Contact :

February 16, 2021 - 4:42 PM

Hello,
This is the expected behavior...

To modify the machine's configuration, you must copy the certificate of this new user to the c:\program files(x86)^wapt\ssl directory of the machines that must be manageable by this user (and restart waptservice on these machines for the certificate to take effect).

The other option (with the Enterprise version) is to deploy an "authority" certificate (CA) on the machines and sign the certificates of the various users with the private key of this CA. The client workstations will then accept packets and actions signed by all users from this CA.
Tranquil IT
User avatar
t.heroult
Messages: 307
Registration: December 8, 2020 - 10:13 AM

February 16, 2021 - 4:54 PM

Ah OK, I hadn't noticed that detail!

Thank you, it works perfectly. :)
Server: WAPT Enterprise 2.6.1.17786 on Debian
Consoles: Windows 10 & 11
Infrastructure: Windows

Did you know? When parrotfish undergo smoltification, their osmoregulation mechanism is reversed!
User avatar
t.heroult
Messages: 307
Registration: December 8, 2020 - 10:13 AM

February 16, 2021 - 4:59 PM

So, what method should be used to propagate the new certificates?
Server: WAPT Enterprise 2.6.1.17786 on Debian
Consoles: Windows 10 & 11
Infrastructure: Windows

Did you know? When parrotfish undergo smoltification, their osmoregulation mechanism is reversed!
Locked