Re: [Openvas-discuss] local account used for scans

2015-07-02 Thread Brian Thompson
I see Failed to shake hands with peer: Could not negotiate a supported cipher suite. and serve_client: failed to attach client session to socket 9. Yes, I'm doing a localhost scan, and as soon as I added the user account to the sudoers file it started working. I'm sure it didn't relate directly

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Michael Meyer
*** Brian Thompson wrote: It was not possible to login using the provided SSH credentials. Hence authenticated checks are not enabled. Anything in the targets sshd logs about this try? I've got my system locked down fairly tight so as a test, I added the local account I created (openvas)

[Openvas-discuss] local account used for scans

2015-07-01 Thread Brian Thompson
Question about account permissionsId like to use a local account for my scans instead of my personal LDAP entry but I cant seem to get the scans to work when I do. If I use my personal credentials (in LDAP with Public/Private key authentication) a scan results in about 200 detections. If I

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Brian Thompson
Im not running the scans as root, I created a user (openvas) that is a member of roots group.ssh openvas @ localhostbanner...openvas @ localhosts password: password entered[openvas @ localhost ~]$ rpm -qayum-utils-1.1.30-14.el6.noarch100s more rpms reported[openvas @ localhost ~]$ On July 1,

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Brandon Perry
I actually don't recommend running scans as root if you can get away with it. I use local accounts, can you SSH into the machine yourself? What happens when you run rpm -qa/dpkg -l if you can SSH into the box? On Wed, Jul 1, 2015 at 9:02 AM, Brian Thompson bthomp...@wyetechllc.com wrote:

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Brandon Perry
Ah, I misread your original post. Not sure then. :/ On Wed, Jul 1, 2015 at 9:15 AM, Brian Thompson bthomp...@wyetechllc.com wrote: I'm not running the scans as root, I created a user (openvas) that is a member of root's group. ssh openvas @ localhost banner... openvas @ localhost's

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Brandon Perry
They are just regular local users added with useradd, no special groups at all. On Wed, Jul 1, 2015 at 9:22 AM, Brian Thompson bthomp...@wyetechllc.com wrote: No problem. Hopefully someone else will have other ideas. For your local accounts, are they members of any special groups (wheel,

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Brian Thompson
No problem. Hopefully someone else will have other ideas. For your local accounts, are they members of any special groups (wheel, root, adm, sys, etc)? On July 1, 2015 at 10:17 AM Brandon Perry bperry.volat...@gmail.com wrote: Ah, I misread your original post. Not sure then. :/

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Brian Thompson
Is sudo required for the account? My personal account has the ability to do sudo commands but the account I created does not. On July 1, 2015 at 10:23 AM Brandon Perry bperry.volat...@gmail.com wrote: They are just regular local users added with useradd, no special groups at all.

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Brian Thompson
It says: It was not possible to login using the provided SSH credentials. Hence authenticated checks are not enabled. I've got my system locked down fairly tight so as a test, I added the local account I created (openvas) to the sudoers file so that it can sudo (passwd required), I am now able

Re: [Openvas-discuss] local account used for scans

2015-07-01 Thread Michael Meyer
*** Brian Thompson wrote: Is sudo required for the account? My personal account has the ability to do sudo commands but the account I created does not. No. Look in the report for SSH Authorization Check ( 1.3.6.1.4.1.25623.1.0.90022) and Determine OS and list of installed packages via SSH