[General] glpi-agent multiple servers and range of modules

[adamcios]

Your question

I have my own GLPI server and the agent installed on all computers and servers. We also work with a security company that uses GLPI, and I’d like to know if it’s possible to configure the agent so that it reports inventory data to two GLPI servers at the same time – mine and the company’s. What I want is that my server has full functionality (installation and infrastructure scanning, deploying packages ), while the external company’s server only receives inventory information about the computers, without any ability to install anything on my machines. Is such a setup possible at all?

[g-bougard]

Hi @adamcios

first point, yes, it's possible to configure glpi-agent to report inventory data to different servers: just set server as a list of servers separated by a comma like: https://server1/glpi,https://server2

If no task other than inventory is configured on server2, only inventory task will be finally run. Anyway, this also means a server2 admin can configure the server to run deploy tasks. If you can't trust server2 and want to block other tasks than inventory, there's no configuration for that.
You can also leave one agent as a service and setup a scheduled task using a dedicated conf to only handle inventory task to another server. You can use --tasks=inventory with --server=https://server2 or use --conf-file to use another configuration.
It's also possible to setup another service with a dedicated configuration file, but you have to setup it manually.

[adamcios]

The goal is to feed asset information (computers and network devices) from one GLPI instance into another in such a way that the assets are not duplicated. Is there a way to achieve this? In that case, we wouldn’t need to send inventory data from the GLPI Agent to two different GLPI servers. Instead, one GLPI instance (let’s call it the master) could periodically export its inventory of computers or network devices, either manually or automatically, into a file, which could then be imported into the second GLPI instance.

[g-bougard]

Maybe you can also scan on GLPI server received inventories and inject new ones to the other server. Inventories are saved under sub-folders of GLPI installation files/_inventories/computers, files/_inventories/networkequipment and files/_inventories/printer folders. You can probably do that with a dedicated script and always to only send updated inventories: more recent than the last time you injected inventories.

Anyway, configure 2 servers still works.

[adamcios]

So if I transfer the files from the main server’s files/_inventories/computers directory to the second server, for example using rsync, into the same location, will the second GLPI automatically process and import this information? Since rsync only updates, it would always synchronize only the new inventory files.

The GLPI plugin and the two-server configuration in GLPI Agent do not guarantee that package installations or scripts could not be executed from the second GLPI server. What I need is for the second server to have inventory data only, without any risk that someone could trigger actions or run scripts inside my network.

[g-bougard]

No, I said you have to inject them (using glpi-injector script for example). Synchronizing FS won't work, the storage is there only to be able to download submitted and integrated inventory files from GLPI interface.