Attention : support for WAPT 2.1 ended on January the 10th 2023.

Please upgrade to the latest supported version

Attention

For post-configuration to work properly, you must first have properly configured the hostname of the WAPT server. To check, use the command echo $(hostname) which must return the DNS address that will be used by WAPT agents on client computers.

Warning

The post-configuration script rewrites the nginx configuration.

If you use a special configuration, save your wapt.conf file with the command

cp /etc/nginx/sites-available/wapt.conf /etc/nginx/sites-available/wapt.conf.old

It will be necessary to overwrite the configuration after the post-configuration with the command :

cp /etc/nginx/sites-available/wapt.conf.old /etc/nginx/sites-available/wapt.conf

Hint

This post-configuration script must be run as root.

  • Run the script.

/opt/wapt/waptserver/scripts/postconf.sh
  • Click on Yes to run the postconf script.

do you want to launch post configuration tool?

            < yes >          < no >
  • Choose a password (if not defined) for the SuperAdmin account of the WAPT server (minimum length is 10 characters).

Please enter the wapt server password (min. 10 characters)

*****************

                < OK >          < Cancel >
  • Confirm the password.

Please enter the server password again:

*****************

                < OK >          < Cancel >
  • Choose the authentication mode for the initial registering of the WAPT agents:

    • Choice #1 allows to register computers without authentication.The WAPT server registers all computers that ask to be registered.

    • Choice #2 activates the initial registration based on kerberos(you can activate it later).

    • Choice #3 does not activate the kerberos authentication mechanism for theinitial registering of machines equipped with WAPT. The WAPT server will require a login and a password for each machine registering with it.

WaptAgent Authentication type?

--------------------------------------------------------------------------
(x) 1 Allow unauthenticated registration
( ) 2 Enable kerberos authentication required for machines registration.
        Registration will ask for password if kerberos not available
( ) 3 Disable kerberos but registration require strong authentication
--------------------------------------------------------------------------
                                        < OK >          < Cancel >
  • Select OK to start WAPT Server.

Press OK to start waptserver

             < OK >
  • Select Yes to configure Nginx.

Do you want to configure nginx?

        < Yes >        < No >
  • Fill in the FQDN of the WAPT server.

FQDN for the WAPT server (eg. wapt.example.com)

---------------------------------------------
wapt.mydomain.lan
---------------------------------------------

            < OK >          < Cancel >
  • Select OK and a self-signed certificate will be generated, this step may take a long time.

Generating DH parameters, 2048 bit long safe prime, generator 2 This is going to take a long time
.......................................+...............................+...

Nginx is now configured, select OK to restart Nginx:

The Nginx config is done.
We need to restart Nginx?

              < OK >

The post-configuration is now finished.

Postconfiguration completed.
Please connect to https://wapt.mydomain.lan/ to access the server.

                                  < OK >

Listing of post-configuration script options:

Options

Description

--force-https

Configures Nginx so that port 80 is permanently redirected to 443