On Thu, Feb 26, 2004 at 10:12:31AM -0600, John C. Welch wrote:

> So I get the first phase of the connection to the server done...but I get a
> login failed. The nessusd.messages file is showing:
> 
> [Thu Feb 26 09:45:08 2004][17492] connection from 172.16.245.21
> [Thu Feb 26 09:45:08 2004][17493] Client requested protocol version 12.
> [Thu Feb 26 09:45:09 2004][17493] bad login attempt from 172.16.245.21
...
> Users were created using nessus-mkcert-client, .nessusrc is in ~/, my certs
> are in ~/.nessus_certs

This error can occur if the subject name in the client certificate
doesn't match what's stored in the user's dname file.  So, compare the
subject from the certificate (obtained by running:

    openssl x509 -in ~/.nessus_certs/cert_$user.pem -noout -subject | \
        sed 's/^subject= *//;'

where $user is the Nessus user) with what's in
/usr/local/var/nessus/users/$user/auth/dname (or wherever the user's
dname file is). 

If they do indeed differ, simply update the dname file with the correct
subject. 


George
-- 
[EMAIL PROTECTED]

Attachment: pgp00000.pgp
Description: PGP signature

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to