Using WAPT Self-Service

Presentation

With WAPT your users can have a selfservice for software installation.

It’s different in the Discovery and Enterprise versions.

Functionality

Discovery

Enterprise

Access to self-service

feature available

feature available

Deploying self-service packages

feature available

feature available

Filtering self-service packages

feature not available

feature available

Management tab

feature not available

feature available

Working principle

The Users gain in autonomy while deploying software and configurations that are trusted and authorized by the Organization. This is a time saving feature for the Organization’s IT support Helpdesk.

Discovery

Only Local Administrators and members of the waptself-service group can access self-service on the hosts.

Attention

These users have acces to all packages in your repository.

Enterprise

You can filter the list of self-service packages available for your users.

A self-service package may be deployed on hosts to list the different self-service rules that apply to the host.

The self-service packages are based on user groups.

Your users will be able to install a selection of WAPT packages without having to be a Local Administrator.

Using self-service feature

Configuration

Discovery

On Discovery create a self-service group on your Active Directory and add your users. This users and all Local Administrator have acces to all packages in your repository.

Note

It is not possible to filter the packages made accessible to the user.

Enterprise

In the console go to the WAPT Packages tab and create Self-service rules.

Active Directory computer group

You can now create your self-service rules package.

Create a *self-service* package
  1. Give a name to your self-service package;

  2. Give a Description;

  3. Click on Add to add an group (at the bottom left);

  4. Name the self-service group (with F2 or type directly into the cell). Group need same name of Active Directory user security group;

  5. Drag and drop the allowed software and configuration packages for this self-service group into the central column;

  6. Add as many groups as you want in the package;

  7. Save the package and deploy on your selection of hosts;

Note

  • If a group appears in multiple self-service packages, then the rules are merged;

  • The authentication used is system authentication by default, it is possible to authenticate with Active Directory.

  • Once the package is deployed, only allowed packages listed in the self-service group(s) of which the User is a member will be shown to the logged in User;

Using Self-Service application

The self-service is accessible in the start menu under the name Self-Service software WAPT :

Self Service

It is also available directly in WAPT directory <base>\waptself.exe.

Note

The login and password to enter when launching the self-service are the User’s credentials (local or Active Directory credentials).

The self-service then displays a list of packages available for installation.

Self Service
  • The user can have more details on each package with the + icon;

Self Service more info
  • Different filters are available for the user on the left side panel;

Self Service more info
  • The Update Catalog button is used to force a wapt-get update on the WAPT agent;

  • The list of package categories is displayed to the user.

  • The current task list of the WAPT agent is available with the task bar button;

Self Service task bar
  • It is possible to change the language of the interface with the button at the bottom left.

Self Service language

Default package categories available

By default, WAPT manage this categories of packages :

  • Internet;

  • Utilities;

  • Messaging;

  • Security;

  • System and network;

  • Storage;

  • Media;

  • Development;

  • Office​​;

It’s possible to add other categories to the packages you develop.

WAPT Agent Settings for WAPT Self-Service

WAPT Agent can be configured to WAPT self-service.

Configuring a different authentication method for the self-service

By default, authentication on WAPT service is configured in system mode.

This behavior is defined with the value of service_auth_type in wapt-get.ini :

Value

Description

system Default value

WAPT service transmits the authentication directly to the operating system; it also recovers the groups by directly interrogating the operating system.

waptserver-ldap

This mode allows authentication to the WAPT server. The WAPT server will make a LDAP request to verify authentication and groups. For this to work, you must have configured LDAP authentication on the WAPT server.

waptagent-ldap

This mode allows authentication with an LDAP server identified in wapt-get.ini. The WAPT agent will make a LDAP request to verify authentication and groups. For this to work, you must have configured LDAP authentication on the WAPT server.

You may be interested in looking up this article describing the settings for WAPT Self-Service and Waptservice Authentification for more options.

Note

For the system authentication under GNU/Linux to work correctly, be sure to correctly configure your pam authentication and your nsswitch.conf. The id username command must return the list of the groups the user is member of.

Warning

In system mode we assume that Local Administrators can see all the packages. To change this behavior she the next point.

Configuring the authentification for Administrator

By default WAPT Self-Service who use system authentification.

In this mode, the Local Administrators can see all the packages of WAPT Server repository.

If you don’t want this behavior there are 2 possibilities :

  • Block the view of all packages for Local Administrators

  • All packages are only visible for a specific user group

Block Local Administrator on self-service

To block all packages from being displayed to Local Administrators you have to add the parameter waptservice_admin_filter in wapt-get.ini.

Value

True

False

waptservice_admin_filter

Enable selfservice package view filtering for Local Administrators.

Disable selfservice package view filtering for Local Administrators.

User group self-service Administrator

It’s possible to use a special user group to define a list of administrators in the Self-Service.

Create a user security group named waptselfservice and add members.

All members of this group can view all packages on the WAPT Self-Service.

With waptservice_admin_filter parameter, you have secured the administrator acces of WAPT Self-Service.

Video demonstration

Using WAPTtray

WAPTtray is a systray program. It’s working in user context.

WAPTtray launches at logon if the option has been ticked during WAPT Agent installation. The icon will show up in the Windows tray toolbar.

We can also launch WAPTtray manually on C:\Program Files (x86)\wapt\wapttray.exe.

Functionalities of the WAPTtray

Main functions

WAPTtray in Windows notification tray
List of functionalities of the WAPTtray

Action

Description

View software status

Launches the local web interface in a browser

Update software inventory

Refreshes the list of available packages. Double-clicking on the tray icon brings about the same effect.

Install updates

Launches the installation of pending upgrades

Run WAPT Self-service

Launches the WAPT Self-Service

Run WAPT Console

Launches the WAPT Console

Configuration

See following table for detailed options

Configuring all installed packages for your own session

Launches a session-setup to configure user environment for all packages installed on the host

View tasks

Display the task list on the local web interface in the browser

Cancel current task

Cancel a running task on WAPT agent

Cancel all current tasks

Cancel all running tasks on WAPT Agent

Wapt service running

Stops and reloads the WAPTservice

Quit

Closes the tray icon without stopping the local WAPTservice

Configuration functions

WAPTtray configuration
List of configuration

Action

Description

View configuration file

Open the C:\Program Files (x86)\wapt\wapt-get.ini file with Local Administrator privileges (credentials may be asked)

Reloading network related service configuration

Reloads the connection to the WAPT Server in the event of a network reconfiguration

Save this host’s to the server

Updates the host’s inventory with the WAPT Server

About this host

Launches the local web interface in a browser file with Local Administrator privileges (credentials may be asked) to display the host inventory

Video demonstration

Using WAPTExit

WAPTExit allows to upgrade and install WAPT packages when a host is shutting down, at the user’s request, or at a scheduled time.

The mechanism is simple. If packages are waiting to be upgraded, they’ll be installed.

Hint

The WAPTexit method is very effective in most situation because it does not require the intervention of the User or the Administrator.

WAPTexit window

WAPTExit executes by default on shutdown, it is installed with the WAPT agent.

The behavior of WAPTExit is customizable in wapt-get.ini.

Warning

If a task is running, the shutdown is suspended until the task is finished.

Manually triggering the execution of WAPTexit

We can also launch WAPTtray manually on C:\Program Files (x86)\wapt\waptexit.exe.

Triggering WAPTexit with a scheduled task WAPT Enterprise feature only

One can deploy a GPO or a WAPT package that will trigger WAPTexit at a pre-scheduled time.

Triggering WAPTexit with a scheduled task is best suited for servers that are not shutdown frequently.

You may adapt the procedure describing how to deploy the WAPT agent to trigger the WAPTexit.exe script at the time of your choosing.

Hint

You can use the following script for your scheduled task, adapted to your need :

waptpython -c "from waptservice.enterprise import start_waptexit start_waptexit('',{'only_priorities':False,'only_if_not_process_running':True, 'install_wua_updates':False,'countdown':300},'schtask')"

Warning

  • All running software that are upgraded may be killed with possible loss of data.

  • WAPTExit may fail to upgrade a software program if a software that you are upgrading is in the impacted_process list of the control file. See below for more information.

  • The method of triggering WAPTExit at a scheduled time is the least recommended method for desktops. It is better to let WAPTExit execute at shutdown or on user request.

WAPTExit settings in wapt-get.ini

It’s possible to modify the behavior of WAPTExit in the wapt-get.ini.

It’s also possible to modify the behavior of WAPTExit directly from the command line, see the next points.

WAPTExit settings in binary

Avoiding the cancellation of upgrades

To disable the interruption of the installation of updates you can run WAPTExit with the argument:

waptexit.exe -allow_cancel_upgrade = True

Increase the trigger time in waptexit

To specify the wait time before the automatic start of the installations you can start WAPTExit with the argument:

waptexit.exe -waptexit_countdown = 10000

Do not interrupt user activity

To tell WAPT not to run an upgrade of running software on the machine (impacted_process attribute of the package), you can run waptexit with the argument:

waptexit.exe -only_if_not_process_running=True

Otherwise waptexit will take the value indicated in C:\Program Files (x86)\wapt\wapt-get.ini:

Launching the installation of packages with a special level of priority

To tell WAPT to only upgrade a specific priority packages, you can run waptexit with the argument:

waptexit.exe -priorities = high

Registering/ unregistering WAPTexit

To register or unregister waptexit in local shutdown group strategy scripts, use:

  • to enable waptexit at host shutdown:

wapt-get add-upgrade-shutdown
  • to disable waptexit at host shutdown:

wapt-get remove-upgrade-shutdown

Video demonstration

Customizing your WAPT WAPT Enterprise feature only

It is possible to customize WAPT with your company colors.

3 programs are customizable :

  • WAPTExit

  • WAPT Self-Service

  • WAPT Message

It’s possible to use the same logo for all programs.

Place the image in <wapt_folder>\templates.

The logo must be named wapt-logo.png

Note

The recommended size of the logo is 200X55 and the format .png

For a different logo per program, see next points.

WAPTExit

It is possible to customize waptexit by placing the image you want in <wapt_folder>\templates

The logo must be named waptexit-logo.png

Note

The recommended size of the logo is 200X55 px and the format .png

Warning

If it is not defined, WAPT uses wapt-logo.png. If it does not exist, use a default WAPT logo.

WAPT Self-Service

It is possible to customize waptexit by placing the image you want in <wapt_folder>\templates

The logo must be named waptself-logo.png

Note

The recommended size of the logo is 200X55 px and the format .png

Warning

If it is not defined, WAPT uses in order waptexit-logo.png, waptself-logo.png and finally the default WAPT logo.

WAPT Message

It is possible to customize waptexit by placing the image you want in <wapt_folder>\templates

The logo must be named waptmessage-logo.png

Note

The recommended size of the logo is 200X55 px and the format .png

Warning

If it is not defined, WAPT uses in order waptexit-logo.png, waptself-logo.png and finally the default WAPT logo.