Tranquil IT Forum

Hello,
how do I register a machine outside of Active Directory with Kerberos enabled?
Thank you.

Place in the agent in question:
The server should request the Wapt server username/password

Sorry, but it's not working...

I just ran some tests:

machine pc1 - W7 - machine outside the domain

waptserver.ini: basic config
allow_unauthentificated_connect = False
allow_unauthentificated_registration = True
use_kerberos = True

https://www.wapt.fr/fr/doc/Configuratio ... index.html :
allow_unauthenticated_registration = True Allows authentication Username / Password for initial registration
allow_unauthenticated_connect = False Defines whether WebSocket requests should be authenticated

test 1:

waptserver.ini:
allow_unauthentificated_connect = False
allow_unauthentificated_registration = True
use_kerberos = True

wapt-get.ini
use_kerberos = 1

wapt-get register
Waptservice User: local admin account
> WaptBadServerAuthentication error which is normal!

Test 2:

waptserver.ini:
allow_unauthentificated_connect = False
allow_unauthentificated_registration = True
use_kerberos = True

wapt-get.ini
use_kerberos = 0

wapt-get register
Waptservice User: local admin account
> The inventory is sent to the WAPT server... so there's a server-side issue that accepts machines without a WAPT admin account connection.

Test 3:

waptserver.ini:
allow_unauthentificated_connect = False
allow_unauthentificated_registration = False
use_kerberos = True

wapt-get.ini
use_kerberos = 0

wapt-get register
Waptservice User: local admin account
> WaptBadServerAuthentication error.

Test 4:

waptserver.ini:
allow_unauthentificated_connect = True
allow_unauthentificated_registration = False
use_kerberos = True

wapt-get.ini
use_kerberos = 0

wapt-get register
Waptservice User: local admin account
> WaptBadServerAuthentification error

In any case, you have to leave
It does not interfere with the recording, and in terms of security, it's better if it's set to False

Test2, it's normal that it works, you put So naturally the server accepts it

Test3 and Test4 should work. I just tested it and it works on my system with WAPT 1.6, but you're clearly using the local service; you need to run the command
In a cmd executed in administrator

Yes, indeed, `wapt-get register` in a command prompt running as administrator does request the wapt admin account and it works! It's perfect, thank you very much!!