DataReel Reporting Agent for Linux DocumentationApprove hosts
A host registers its certificate on its first run and sends nothing until it is approved, on the admin page or with the enrollment token.
Host states
| State | Meaning |
|---|---|
| pending | Registered, waiting for an admin. The agent tries again every cycle. |
| approved | Reports are accepted |
| revoked | Reports are refused until an admin approves the host again |
admin.php lists each host with its state, key fingerprint, registration time and last report, with buttons to approve, revoke and delete it (with CSRF protection).
Check the fingerprint
Before you approve a pending host, check that the fingerprint on the admin page is the one on the host:
# drra fingerprintThe fingerprint is also in /var/log/drra/drra.log.
Enrollment token
With enrollment_token set in server.ini and the same value in each agent's drra.ini, hosts are approved as they register. That suits large rollouts with Ansible or a kickstart file. Change the token after a rollout, or empty it, so new hosts need an admin again. Hosts already approved keep reporting.
Reinstalled hosts
A host is registered by its host name, and the certificate's CN must match it. A reinstalled host makes a new key, and the server answers key_mismatch until an admin deletes the old registration. Then the host registers again on its next cycle. Two hosts with the same host name cannot both report.