Chat now with support
Chat with Support

Foglight 5.9.4 - Installing Foglight on a UNIX System with an Embedded PostgreSQL Database

Before Installing Foglight Installing Foglight
Preparing to install Installing a new version of the Management Server Installed directories Foglight settings Uninstalling Foglight Upgrading the Management Server
Running the Management Server Installing and Upgrading Cartridges Installing Agents Appendix: Switching from an Embedded to an External Database

Setting up an encrypted LDAP connection with SSL

Use the following instructions if you need to encrypt communication between the Management Server and the LDAP server.

To encrypt communication between Management Server and LDAP:
1
Acquire the LDAP server certificate in .pem format from the administrator.
2
Import the certificate into the Management Server keystore, <foglight_home>/jre/lib/security/cacerts (default password: changeit), with the following command:
<foglight_home>/jre/bin/keytool -J-server ‑import ‑file <path_to_cert_file> ‑alias ldapsvrcert ‑keystore <path_to_cacerts> ‑storepass <store_pwd>
 
* 
NOTE: If you do not specify the password using the ‑storepass option, keytool prompts you to supply it.
NOTE: In addition to the Root CA certificate, there may be one or more intermediate CA certificates. If so, make sure to import the Root CA certificate and all intermediate CA certificates in sequence.
The following are the examples of command for importing Root CA and intermediate CA certificates:
•
Root CA certificate: <foglight_home>\jre\bin\keytool -import -trustcacerts -alias ldapsvrcert -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>
•
Intermediate CA certificate 1: <foglight_home>\jre\bin\keytool -import -alias ldapsvrcert2 -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>
•
Intermediate CA certificate 2: <foglight_home>\jre\bin\keytool -import -alias ldapsvrcert3 -keystore <path_to_cacerts> -storepass changeit -file <path_to_cert_file>
3
On the navigation panel, under Dashboards, click Administration > Users & Security > Directory Services Settings.
4
Under LDAP Locations, click Edit.
5
Specify the LDAP server URL in the following format:
ldaps://ldap_server_host_name:636
 
* 
NOTE: The port number for LDAP over SSL is usually 636. Confirm the exact port number with your LDAP server administrator.
6
Restart the Management Server.

Using encryption when sending email from Foglight

You can use encryption when sending email from Foglight. To do so, you must enable Foglight to use the SSL protocol and configure the mail server used by Foglight to use an SSL certificate that is not self-signed.

You can configure Foglight to use the SSL protocol either on the Email Configuration Dashboard or by editing the related mail.use.ssl registry variable. See the Administration and Configuration Help for more information.

See the documentation for your mail server for information about configuring it to use an SSL certificate.

Setting parameters for an embedded database

The file <foglight_home>/config/server.config contains a number of settings related to the embedded database. In most cases, you do not need to change these settings. If you need to edit these parameters, you must restart the Management Server after doing so.

Specifying whether an embedded database is used

When you run Foglight with an embedded database, the parameter server.database.embedded is set to true. If you are switching from an embedded to an external database, you must set this parameter to false.

For more information, see Appendix: Switching from an Embedded to an External Database.

If you have been running Foglight with an external database, then set server.database.embedded to true and restart the Management Server, Foglight starts with the embedded database. The data displayed in Foglight after you perform these steps depends on whether you had previously run Foglight with the embedded database:

•
If you have previously run Foglight with the embedded database: The Management Server reflects the state of the previously run embedded database.
•
If you did not previously run Foglight with the embedded database: The state of the Management Server is like new, since no data exists in the database.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating