Horde Agent Enrollment

Development Pipeline & Plugins
, ,
1

Hello,

When using the Horde Agent MSI Installer, is there a way to configure an authentication mechanism as part of the installation process?

From what I’ve observed, simply installing the agent and providing the Horde Server URL is enough to initiate the agent enrollment process. While I understand that an admin must approve each registration within the Horde interface, I’m curious if there is any form of pre-enrollment filtering available—something that ensures only authorized agents are allowed to request enrollment.

Additionally, during the enrollment phase, is it possible to remove or reject specific agents from the pending list web page (http://{{ HOST_NAME_OR_IP_ADDRESS }}:13340/agents/registration) if we decide not to proceed with their registration?

Thank you

2

Steps to Reproduce

3

Hi Victor,

Currently, authentication is a user-level option, and not an agent-level option. As you have correctly observed, the agent will attempt to connect to the server when the service is run and create an enrollment request if it is missing its configuration sent from the server. There is no way to “gate” agent enrollment requests on the server side at this time, and there is no way to block the requests so they will no longer show up in the pending list UI.

Basically, once an agent has been approved by the admin, it is considered trusted and available. It can be disabled server-side so that it can’t take on work or attempt another enrollment. It can also be deleted, but the agent can attempt to enroll again.