Quick question for ya ll I recently changed my `url prefix` osquery #fleet

Quick question for ya'll I recently changed my `u...

arod

04/11/2021, 9:33 PM

Quick question for ya'll I recently changed my

url_prefix

value and now agents are not enrolling. Here is what I modified: 1. kolide.yml adding

url_prefix

. Set it to

/fleet

. Not Trailing / 2. Changed

osquery.flags

from the agents to prepend

/fleet

on everything (/fleet/api...) 3. Changed all

fleetctl

references with

/fleet

in the front.

fleetctl config --url_prefix /fleet

...... What I'm I missing? Agents are not registering. =/ I am use

osqueryctl

on MacOS

arod

04/11/2021, 9:42 PM

Copy code

Note that some other configurations may need to be changed when modifying the URL prefix. In particular, URLs that are provided to osquery via flagfile, the configuration served by Fleet, the URL prefix used by fleetctl, and the redirect URL set with an SSO Identity Provider.

I slapped

/fleet

in front of everything. Agents won't register. Server does come up as

<http://ok.com/fleet|ok.com/fleet>

arod

04/11/2021, 10:23 PM

Copy code

Failed enrollment request to <https://application.com/hunt/api/v1/osquery/enroll> (Request error: certificate verify failed) retrying..

arod

04/11/2021, 10:23 PM

Any help with that? =/

arod

04/11/2021, 10:43 PM

Found this and I'm going through everything.. Might be my CNAME in the TLS certs. https://github.com/fleetdm/fleet/blob/master/docs/2-Deployment/FAQ.md#how-do-i-fix-certificate-verify-failed-errors-from-osqueryd

arod

04/12/2021, 12:58 PM

ALL CLEAR/GOOD Link above answered my question! Thanks for the FAQ Folks!

arod

04/12/2021, 12:59 PM

If anyone has the same issue, feel free to reach out to me 🙂

zwass

04/12/2021, 4:43 PM

Sweet 🙂

2 Views

Open in Slack

Previous Next