Posts made by astrugatch

I agree. I asked for the something similar here: https://forums.fogproject.org/topic/12096/allow-client-to-pull-inventory-information-without-pxe-booting

@george1421

My MySQL knowledge is pretty shallow. For this situation I’ve got enough data, but I’ll read up and maybe change things then.

For anyone interested in doing this you need to make sure you have the older version of the MySQL Java Connector (5.1.47) or you get the timezone error I was seeing. You can also only choose one of the tables/views to map so you will either need all of your data in the host table or the inventory table.

I am currently running WHD 12.5.2 and will be updating to 12.7 soon so I will update this if there are any changes.

@george1421

That’s perfect. the Inventory table got me basically everything I need. For some reason I can only read one table for the import so I had to choose between the Host and Inventory tables but luckily my hostname and othertag are already the same so I could treat them the same.

@george1421 @Tom-Elliott

Do you happen to know the mapping of the database fields to the table that inventory report spits out?

@george1421

Thanks. I’ve put in a ticket with solarwinds and am waiting back from them. I’ll write up a doc on setting this up if there is any interest for other admins (that happen to use both WHD and FOG) I know WHD isn’t too popular so I don’t know how many people would be interested.

@george1421

So I updated MySQL with the command:

GRANT ALL ON fog.* TO ‘fogwhdaccess’@‘IP OF WHD’ IDENTIFIED BY ‘PASSWORD’;

On WHD I installed mysql connector and it definitely sees the DB. I’m now running into an issue that is probably more on Solarwinds’ side which i have an error about timezones

The server time zone value 'EDT' is unrecognized or represents more than one time zone. You must configure either the server or JDBC driver (via the serverTimezone configuration property) to use a more specifc time zone value if you want to utilize time zone support.

The fix that I find online for other things using this connector all seem to point to needing to update the config for the connection to include UTC but I’m doing this through the GUI and don’t know where that config is found (again more of a WHD issue).

I am looking to hook our WebHelpDesk into FOG to pull information from the database to populate Assets in WHD.

We currently do this with WHD and JAMF and I know WHD can reach out to other DBs to do this as well.

What type of DB does FOG use? MySQL, PostgreSQL, something else?

Is there IP restrictions that I need to change for an outside device to access the DB?

Is there a built in DB account? & cab I make a read only account?

Thanks!

@Sebastian-Roth

It might be worth researching how services like JAMF support external CAs for their enrolled clients.
By default JAMF works the way fog works with a selfsigned cert from its own CA but they do have support for certain Public CAs.

@Sebastian-Roth

Thanks for the super thorough reply. I wasn’t looking to encrypt the client traffic, just the web UI, but knowing that them having the same hostname and thereby passing through the ReverseProxy was my concern. The separate vhost or DNS entry might be better, one for the web UI and one for the clients to use, so I can leave the CA certs untouched. then the clients can go directly to the fog.domain.com/fog and the webUI can be something like fogmgmt.domain.com/fog

I do think support for external CAs would be good in the future for the client as well but that isn’t my current goal.

Thanks for all your help!

Hi,

I am looking to use the Let’s Encrypt wildcard Certs with a number of the sites we host (even those used internally) and was planning on putting them all behind a reverse proxy since we can’t automate our DNS and need to allow Certbot to communicate with Lets Encrypt’s servers. If we have an internal DNS name for fog that we put into the client (fog.domain.org/fog) will it be a problem if it is passing through the reverse proxy?

Thanks

@Technolust

Have you configured your DHCP options in your DHCP server for the 340 VLAN scope?

@Sebastian-Roth

If I am installing FOG for the first time (as opposed to upgrading) and I enter the DNS name as part of the new installer and having the CA generate a cert with the DNS/hostname does HTTPS become the default.

@Sebastian-Roth
I saw the change in GitHub but didn’t dig too deep. If you fill out these values during a clean setup does it make default FOG to https?

@Tom-Elliott

I can always deploy a new client via GroupPolicy so that doesn’t scare me from making the change. I’ll probably hold off for now only because it’s not a huge issue to stay on http for me.

I think adding a hostname item would be great and it would make FOG much more portable and secure to make https the default

@Tom-Elliott

If I change that setting how do I force it to generate a new cert? Do I just run the installer again?

@Sebastian-Roth
Good to know. I’m using FOG with HTTP so it hasn’t been an issue (I’ve moved it several times as virtual environments shifted). It might be worth looking into adding a feature in the installer to ask for the DNS name of the machine so it can generate the cert with that as the CN rather than the machine’s IP.

@JimmyJ0516
Do yourself a favor and create a DNS record for your FOG server. That way if you ever change the IP of your server all it takes is updating the record to move all your clients over.

Nevermind. Found it (in my own post history no less…)

https://wiki.fogproject.org/wiki/index.php?title=BIOS_and_UEFI_Co-Existence#Using_Windows_Server_2012_.28R1_and_later.29_DHCP_Policy

I know there is an article about this but I can’t seem to find it. I want both the unionly and ipxe boot files available to my machines (I still have a couple old machines that aren’t configured for efi as well as my virtualbox and Xen VMs).

Can anyone send me that wiki link for the configuration?