GLPI 10.0.11 is available!

A new GLPI version is available.

This release fixes a few security issues that have been recently discovered. Update is recommended!

You can download the GLPI 10.0.11 archive on GitHub.

You will find below the list of security issues fixed in this bugfixes version:

  • Authenticated SQL Injection (CVE-2023-43813)
  • SQL injection through inventory agent request (CVE-2023-46727)
  • Remote code execution from LDAP server configuration form on PHP 7.4 (CVE-2023-46726)

On this last point, we wanted to recall the 7.4 version of PHP is very outdated and not supported anymore by the developers!
You should upgrade on a recent version, at least 8.2 (8.0 will be outdated at the end of the year and 8.1 will be only with security fixes).

Also, here is a short list of main changes done in this version:

  • Enhance pending reasons display
  • various LDAP fixes (timeout, location import, deletion/restoration scenarios)
  • several inventory fixes (unmanaged assets reconciliation, rules for phones, rules logs for discovery, Cisco stacks, removal of remote management)
  • several performance enhancements (defer entity tree loading, strong enhancement on actors loading, all assets query execution time, web cron removal, dual ajax call for tab loading)
  • highlights of security requirements on install/update page. Some options like PHP versions, web folder setup are suggested with a strong visual.

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

GLPI Inventory – What’s the difference between the native, the plugin and the GLPI Agent toolbox

Since GLPI 10, we have added three new tools for companies willing to manage and keep track of security and investments on IT assets like computers, servers, monitors, printers and, software programs, for example.

Companies of various sizes must manage the assets, so they might plan correctly the lifecycle of purchase, usage, maintenance and/or disposal correctly and effectively. Imagine if an IT department can keep track of the number of computers or monitors there are to be fixed and how many should be bought the next year.

Native GLPI Inventory

The native inventory is the fundamental functionality at the heart of GLPI. It acts as a central hub for managing and tracking IT assets, covering everything from hardware and software to user accounts and basic inventory information.

You will always start here. The native inventory serves as the foundation, addressing basic inventory needs like tracking the number of computers that need attention or planning for new hardware acquisitions.

The GLPI Native Inventory lays the groundwork, providing the essential structure for all things asset management in GLPI.

GLPI Inventory Plugin

Think of the plugin as an extension that enhances GLPI’s inventory capabilities. It steps in when you require more advanced features such as detailed hardware and software information, network discovery, and robust reporting – ideal for medium to large organizations with complex IT infrastructure.

You will deploy the plugin when your IT landscape becomes intricate, demanding network discoveries, scheduled tasks, SNMP inventory, or software deployment. It’s the toolkit for handling the complexities of a dynamic IT environment.

The GLPI Inventory plugin expands GLPI’s functionality, introducing advanced features and additional capabilities beyond the native inventory.

GLPI Agent Toolbox

The GLPI Agent toolbox introduces an agent software deployed on client devices to collect detailed information. It serves two primary purposes: replacing certain GLPI Inventory plugin features like network discovery and inventory support via scheduled tasks, and providing real-time data from devices in challenging network environments.

You will turn to the toolbox when you need to supplement or replace features provided by the GLPI Inventory Plugin, particularly in scenarios where direct GLPI access is restricted, such as strongly segmented DMZs or isolated VLANs. It’s your go-to for detailed, real-time information and proactive monitoring.

The toolbox offers more reliable inventory data, more tools to manage inventory tasks, reduces manual data entry, facilitates proactive monitoring, supports remote inventory and tasks in isolated or secured network environments.

When to Choose

The native inventory is the cornerstone, always part of your GLPI infrastructure. The GLPI Inventory Plugin and GLPI Agent Toolbox are able to extend some GLPI’s capabilities to address advanced tasks, such as network discovery and inventory in segmented DMZs and VLANs, and provide solutions for restricted or challenging network environments. 

Your choice depends on your organization’s specific requirements, the complexity of your IT infrastructure, and the need for enhanced features that go beyond the native inventory’s capabilities.

Useful Links

Video content:

00:00 – GLPI Inventory, Plugin, and Agent Toolbox

00:28 – Native GLPI Inventory Features

04:40 – New Types of Assets

06:20 – GLPI Partial Inventory

08:34 – Pictures in Assets

09:45 – GLPI Inventory Plugin

11:39 – GLPI Agent Toolbox

15:02 – Which one should you choose?

New Plugin: PowerDNS

We would like to announce a new plugin – PowerDNS – available via our professional offers ! From the level “Basic” in GLPI Network Subscriptions (on-premise):

Plugin Features:

Import and manage domains/records from and to PowerDNS by using GLPI interface. We use PowerDNS API to retrieve these objects and insert them in the corresponding GLPI tables.

On plugin first installation and when configuration is done, we import all domains and records from PowerDNS to GLPI. Then, we keep them synchronized with the help of a GLPI crontask.

More, every actions done on GLPI side on related objects will be replicated on PowerDNS side. Domains deleted or updated, records deleted or updated, etc.

Screenshots:

Find the subscription brochure here: https://glpi-project.org/wp-content/uploads/EN.pdf

On GLPI Network Cloudhttps://glpi-network.cloud/ 

Documentation for this plugin can be found by clicking this link: https://plugins.glpi-project.org/#/plugin/powerdns 

You can test this plugin (and all other GLPI Network plugins) on your GLPI Network Cloud demo instance. 

Kind regards,

New partner Silver: Astiostech

We are happy to announce our new Silver partner in Malaysia: Astiostech.

Founded in 2013, Astiostech has quickly established itself in the field of enterprise solutions, accumulating a rich experience of more than 15 years.


Our expertise covers various areas such as:

  • Enterprise voice,
  • monitoring,
  • Cybersecurity
  • IT asset management.

All with a deliberate emphasis on open platforms and software – open-source and enterprise open-source software. This isn’t merely about riding the wave of the latest tech trends; it’s about guaranteeing adaptability, flexibility, and scalability for our valued clientele. In providing a 360 degree ecosystem, our clients can rely on Astiostech for solution purchase, design, deployment, customization, training and importantly, reliable support.

Our track record is a testament to our prowess. Astiostech has consistently surpassed expectations, providing unparalleled support to ensure our clients encounter minimal roadblocks on their technological odysseys. This relentless pursuit of excellence has attracted a wide array of clients, including titans from banking, government, manufacturing, and other sectors.


The reputation of Astiostech is fortified by our robust partnerships with industry juggernauts like TM Malaysia and IBM. These collaborations not only vouch for our credibility but also empower us to furnish our clients with cutting-edge solutions of utmost reliability and quality.


However, quality alone isn’t our sole concern; reliability stands as the linchpin of our deployment strategies. We comprehend the need for solutions that not only work effectively but also stand as unwavering pillars, ensuring uninterrupted operations in the whirlwind of the digital landscape.


At Astiostech, our passion for technology coalesces with a steadfast commitment to effecting positive societal change. We champion equality, cherishing and embracing the diverse talents that grace our path. Our dedication to the environment echoes through our operations and solutions, placing a premium on sustainability. Moreover, community empowerment holds our earnest investment, for we believe authentic success lies in the transformative impact we bestow upon the world around us.

Website: https://bit.ly/3Rgw2Zv

We are excited that GLPI ITSM solution is becoming more and more represented all over the world and GLPI Network (our support offer for on-premises – get your IT Infrastructure secured) subscription service will be available for more customers through our new partners.

Our large partnership network is always open for new collaborations. If you are interested in representing one of our products in your country, get in touch with us: https://glpi-project.org/contact_us/

Being a partner means:

  • Having an a direct access to the Teclib´s tech expertise;
  • Get special discounts;
  • Access official support,
  • Many other tools which will help you to gain more customers and increase reputation on the market by adding open source ITSM to your portfolio.

Discover all benefits of being a partner here: https://glpi-project.org/partners/

Introducing Gapp by TICGAL – Your Seamless Mobility Companion for GLPI”

Teclib’ is happy to announce that GLPI Gold partner in Spain TICGAL launched an app called Gapp, a revolutionary new mobile application designed to seamlessly integrate with GLPI (Gestionnaire Libre de Parc Informatique). Gapp stands out as an essential tool for businesses and individuals looking to manage their IT resources efficiently and effectively.

Free Download Available Now

One of the most compelling features of Gapp is its accessibility. TICGAL is proud to offer Gapp as a free download available on the Google Play Store. This means that users can immediately benefit from its wide range of functionalities without any upfront cost.

Key Features and Benefits

  • Seamless Integration with GLPI: Gapp is specifically designed to work in tandem with GLPI, ensuring a smooth, hassle-free experience.
  • Enhanced Mobility: With Gapp, users can manage their IT assets and resources on the go, bringing unparalleled flexibility to IT management.
  • User-Friendly Interface: The app boasts an intuitive design, making it easy for both seasoned IT professionals and novices to navigate and use.

White Label Option for Custom Branding

In addition to its standard features, Gapp offers a unique White Label option. This allows businesses to customize the app with their own branding, creating a personalized experience for their users. The White Label option is ideal for companies looking to maintain brand consistency and offer a tailored IT management tool to their employees or customers.

Get Started with Gapp Today

Download Gapp now from the Google Play Store and experience the future of mobile IT management. For more information about the White Label option and other features, please visit our website.

Useful links

Release GLPI Agent for Android

Description:

Features:

This new version allows you to override the serial number :

In new versions of Android, it is no longer possible to retrieve the ‘real’ phone’s serial number (considered as sensitive and private data). The agent therefore generates a UUID (as recommended by Google -> https://developer.android.com/training/articles/user-data-ids#best-practices-android-identifiers).

However, on a factory reset or when reinstalling the inventory agent, this UUID changes. And when an inventory is uploaded, GLPI will create a new device (because the serial number is different). It is now possible to define a serial number (with the one already stored in GLPI) to avoids duplication in the GLPI inventory.

The Agent Config plugin has also been updated, to feature a new QRCode / Deeplink on the device file containing the serial number.

Android compatibility

  • From Android 4 (Jelly Bean) to Android 13 (Sdk 33)
  • GLPI / GLPIinventory / Agent Config compatibility
GLPIGLPIInventoryAgent Config
10.0.91.2.31.2.0
10.0.101.3.x1.2.1
Release linkRelease linkGLPI Network Subscription

Distribution

Google Play -> https://play.google.com/store/apps/details?id=org.glpi.inventory.agent