Hallo Jan-Oliver, Am Freitag 02 Mai 2008 schrieb Jan-Oliver Wagner: > On Mittwoch, 30. April 2008, Carsten Koch-Mauthe wrote: > > Another question for me are the credentials to be used with smbcl_api. > > The "main" creds are given on the crdentials page in openvasclient. But > > today i've found some additional smb creds on the prefs. page. Is it > > useful to use more then one user/pw pair for smb ? If so how to decide > > which pair for which host(s). I've found no dependency between user/pw > > and host. Probably adding a new smb_host_credentials field ? Or trying > > all creds on every host if login fails ? > > there is indeed a larger design question which does not only > apply to smb but to all credentials. Thie quesiton is about > wtether to have same credentials for multiple targets or > whether to have individual credentials for each target. > In the latter case I see two options to handle it, either > with a clever OpenVAS/NASL-script or by defining that > for each different credentials a scope of its own is to > be created in OpenVAS-Client.
I think it is more flexible if some can use different credentials for different targets. Probably it is useful to add a Host(s) field for every Credentials which if is set can hold one or more tragets for this credentials. This field then should work like the Target(s) field in Targets selection (comma separated). This probably can be done with some nasl and without changing the client. > > However, for the time being I'd propose we just use > a "smb_authorization.nasl" analogous to "ssh_authorization.nasl", > ie. have only a single set of credentials for each type (ssh/smb/...) By now the smb credentials are handled by the logins.nasl script. This is working ok. -- Gruss Carsten Koch-Mauthe http://www.dn-systems.de mail: [EMAIL PROTECTED] DN-Systems Enterprise Internet Solutions GmbH Hornemannstr. 11 31137 Hildesheim, Germany Tel. +49-5121-28989-0 Fax. +49-5121-28989-11 21 Sunrise Ct, S.San Francisco, CA 94080, USA Tel. +1-650-472-2512 Mob. +1-650-430-1219 Handelsregister HRB-3213 Amtsgericht Hildesheim Geschäftsführer Lukas Grunwald _______________________________________________ Openvas-plugins mailing list [email protected] http://lists.wald.intevation.org/mailman/listinfo/openvas-plugins
