On 10/16/2012 12:20 AM, Jan-Oliver Wagner wrote:
On Thursday 11 October 2012 08:53:55 Schulte, Klaus (NSN - DE/Ulm) wrote:
when creating a new target with gsad the target will not be
stored/listed in targets list
if the target has ssh credentials not empty.
I really can not reproduce this behaviour.
It is a pretty standard operation often used.
Are you sure you did not run into some race condition?
Best
Jan
Oh, I though this was a known problem with GSA and never looked into it
much since I can set up my scans via OMP.
The problem presents itself like this: as soon as a target has SSH
credentials associated to it, the GSA won't save it. The SSH credentials
I use were created with the "Autogenerate credential" option in GSA.
If you try to create a new target with credentials, nothing happens
(page loads after pressing "Create Target", no error is displayed, but
the target isn't added). I cranked up the logging and according to
gsad.log it never even tried to "<create_target>" (should be between
authentication and get_targets IIRC). According to the logs this is
what happens:
=> <authenticate>...
<= <authenticate_response status="200" ...
=> <get_targets sort_field="name" sort_order="ascending"/>
<= <get_targets_response status="200" ...
=> <get_target_locators/>
<= <get_target_locators_response status="200" ...
=> <get_lsc_credentials sort_field="name" sort_order="ascending"/>
<= <get_lsc_credentials_response status="200" ...
=> <get_port_lists sort_field="name" sort_order="ascending"/>
<= <get_port_lists_response status="200" ...
And then xsltproc called to generate the html with gsad.xsl
If I try to change a task via GSA that has a target with SSH credentials
associated to it (e.g. change the slave), it also fails.
The web interface says:
Operation: Save Task
Status message: Invalid parameter
At least one entered value contains invalid characters or exceeds a
size limit. You may use the Back button of your browser
to adjust the entered values. If in doubt, the online help of the
respective section will lead you to the appropriate help page.
As above <modify_task> is completely missing in the gsad.log when a
target with ssh credentials is involved.
I compiled my binaries from source (openvas_5.0.3) on a Ubuntu 12.04
host (if that makes any difference).
If there are any other logs or information I can provide to help anyone
here track down the problem, just holler.
Ryan
_______________________________________________
Openvas-discuss mailing list
[email protected]
http://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
