Hello,

I have found a workaround for this behaviour (it works on gentoo with
kernel 3.4 on a server profile). The first credential you create you do it
using CLI with this command:

omp -u your_openvas_user -w your_password --xml="<create_lsc_credential>
<name>init</name><login>init</login><password>init</password></create_lsc_credential>"

The credential can be whatever you want (you just want it to have one
created). Afterwards the webinterface allows you to create credentials
without any problem. It makes me think that the problem is either with
openPGP or with that table on tasks.db. Looking at openvasmd.log I found
that when the openvasmd process would hang up the log showed this:

base gpgme:MESSAGE:2013-05-21 08h32.07 UTC:18508: Setting GnuPG homedir to
'/etc/openvas/gnupg'
base gpgme:MESSAGE:2013-05-21 08h32.08 UTC:18508: Using OpenPGP engine
version '2.0.19'
md  crypt:   INFO:2013-05-21 08h32.08 UTC:18508: starting key generation ...
md   main:WARNING:2013-05-21 08h37.51 utc:16834: cleanup_manage_process:
attempt to close db with open statement(s)

Could the devs please look into this?

Thanks,
Paula


2013/5/20 Paula Gonzalez Muñoz <[email protected]>

> Hi all,
>
>
> I've checked that doing this the credentials are stored on the tasks.db
> with the password on clear text. after doing some test with this setup I
> tried to run openvasmd without the --disable-encrypted-credentials flag and
> now every time I try to save a credential I get an internal error message.
> Is there any other solution to the CPU consumption problem? And also, how
> do I get to make openvaswork again?
>
> Regards,
> Paula
>
>
> 2013/5/20 Paula Gonzalez Muñoz <[email protected]>
>
>> Hi YanQian,
>>
>> I've tried it and it works like a charm :). However I'm also courious
>> about the security implications of this.
>>
>> Regards,
>> Paula
>>
>>
>> 2013/5/18 YanQian <[email protected]>
>>
>>> Hi, Paula,
>>> I got the same issue with OpenVAS 6 on RHEL6,  the temporary workaround
>>> is add this option to openvas manager service.
>>>  "--disable-encrypted-credentials"
>>>
>>> It was told by mime at #openvas IRC.  I added it to the file
>>> /etc/sysconfig/openvas-manager on RHEL.
>>>
>>> And I also want to know, if this option is used, does it mean that
>>> credentials are saved in some place with clear text?
>>>
>>> regards,
>>> YanQian
>>>
>>> ------------------------------
>>> Date: Fri, 17 May 2013 17:51:53 +0200
>>> From: [email protected]
>>> To: [email protected]
>>> Subject: Re: [Openvas-discuss] openvasmd using all CPU
>>>
>>>
>>> Hello,
>>>
>>> I have again the same problem on a completely different machine. Any
>>> idea about the possible cause and how to solve it? It only happens when
>>> trying to create credentials (I've been able to create other objects).
>>>
>>> Regards,
>>> Paula
>>>
>>>
>>> 2013/4/30 Paula Gonzalez Muñoz <[email protected]>
>>>
>>> Hello,
>>>
>>> I was able to install openvas from a gentoo ebuild and, when trying to
>>> create a credential process openvasmd is using all available CPU and the
>>> process wont progress.
>>>
>>>   PID USER      PR  NI  VIRT  RES  SHR S  %CPU %MEM     TIME+
>>> COMMAND
>>>  5689 root      20   0  169m  26m 2328 R  95.4  1.3   3:59.75
>>> openvasmd
>>>
>>> I have tried creating credentials using an OMP command and it does with
>>> no problem. Also, once I have the credentials I've tried creating a target
>>> and a task and it does with no problem either. Any ideas?
>>>
>>> It is a clean openvas install on a clean gentoo install.
>>>
>>> Regards,
>>> Paula
>>>
>>> --
>>>        Paula González Muñoz
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> --
>>>        Paula González Muñoz
>>>
>>>
>>>
>>>
>>> _______________________________________________ Openvas-discuss mailing
>>> list [email protected]
>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>>>
>>
>>
>>
>> --
>>        Paula González Muñoz
>>
>>
>>
>>
>
>
>
> --
>        Paula González Muñoz
>
>
>
>



-- 
       Paula González Muñoz
_______________________________________________
Openvas-discuss mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Reply via email to