[Openvas-discuss] gvm_pyshell connection woes

[Chris Morse]

Good afternoon,

I am experiencing authentication issues using either ssh or tls when trying
to authenticate.

Fresh install of openvas9 using the mrazavi/openvas repo.

I am able to issue the following and connect and execute scripts without
issue

openvasmd -c ovsock
gvm_pyshell socket --sockpath ovsock --gmp_username admin --gmp_password
admin ./myscript.gmp

This, however, is leaving multiple openvasmd instances running.

I've run netstat -tulep and see that it is listening on port 6379 and
changed the port values when connecting using TLS. I get a handshake
timeout.

Using ssh i simply get an authentication failed message.

If there's a configuration item or something else I've missed, I've scoured
the ultraweb in search of it.

Any pointers would be much appreciated.

Chris Morse, CISA, CISM
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] OMP Execution Problem

[Thijs Stuurman]

I start (and stop) OpenVAS using a custom script.

/opt/openvas9/sbin/openvasmd -p 9390 -a 127.0.0.1

/opt/openvas9/sbin/gsad -p 443 --listen=0.0.0.0 --mlisten=127.0.0.1 
--mport=9390 --ssl-private-key=/etc/apache2/ssl/priv.key 
--ssl-certificate=/etc/apache2/ssl/pub.crt --http-sts 
--gnutls-priorities="NORMAL:-VERS-TLS-ALL:+VERS-TLS1.2:-CIPHER-ALL:+AES-256-CBC"

You need to tell gsad how to connect to openvasmd (mport options).

Thijs Stuurman
Security Operations Center | KPN Internedservices B.V.
thijs.stuur...@internedservices.nl | 
thijs.stuur...@kpn.com
T: +31(0)299476185 | M: +31(0)624366778
PGP Key-ID: 0x16ADC048 (https://pgp.surfnet.nl/)
Fingerprint: 2EDB 9B42 D6E8 7D4B 6E02 8BE5 6D46 8007 16AD C048

W: https://www.internedservices.nl | L: 
https://nl.linkedin.com/in/thijsstuurman

Van: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] 
Namens Louis Bohm
Verzonden: dinsdag 6 maart 2018 13:08
Aan: Shreyas M R 
CC: Abdallah El.Damiry ; openvas-discuss@wald.intevation.org
Onderwerp: Re: [Openvas-discuss] OMP Execution Problem

It does not seem to be listed in many places on the internet.  At least not 
when I googled it a long time ago.  Whats odd is every one seems to run into 
the issue.

As root run this but you can change the port number to your suiting:
/usr/sbin/openvasmd -a 0.0.0.0 -p 9393
If you only want to allow OMP to be hit from the local host change the IP from 
0.0.0.0 to 127.0.0.1.  You will need to re-run this every time you restart 
openvas-manager.

I have seen and tried adding this to /etc/sysconfig/openvas-manager in the form 
of:
OPTIONS=“—listen 0.0.0.0 —port 9393”
My only problem with adding this to the sysconfig server file is when I do this 
I can no longer login to GSAD for some reason.  But so far I have only done 
this on my slave scanner so its no big deal for me.  When I run it from the CLI 
all works fine.

Louis
:
Louis Bohm - Sr. Systems Engineer
Dell TechDirect Certified

On Mar 6, 2018, at 5:34 AM, Shreyas M R 
> wrote:

Hi,

Are omp requires the host parameter to connect openvas. for port parameter -p 
. Usually its 9390

Try my github link https://github.com/shreyasmrs/OpenVAS
I have tabulated steps to use omp

Thanks
Shreyas

[Afbeelding verwijderd door 
afzender.]


Shreyas M R
about.me/shreyasmrs 



On Tue, Mar 6, 2018 at 2:13 PM, Abdallah El.Damiry 
> wrote:
Dears ,

I have a problem with OMP command when I'm using it in more than a case and 
it's not working.
- Case 1 :
   # omp -u admin -w pass -g
Output :  failed to acquire socket

- Case 2 : (redis port 6379)
   # omp -u admin -w pass -h 127.0.0.1 -p 6379 --xml='' -v
Output :  will try to connect to host 127.0.0.1, port 6379... and no thing else

Finally when I execute openvas-check-setup , the script finishes with: it seems 
like your openvas-9 installation is ok.

Is there is any solution to this issue ?

Thanks in advance.

Yours

AHD

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] OMP Execution Problem

[Abdallah El.Damiry]

Thanks all of you it works.
And special thanks for Louis . It works by your solution . 

Best Regards

Sent from my iPhone

> On Mar 6, 2018, at 2:08 PM, Louis Bohm  wrote:
> 
> It does not seem to be listed in many places on the internet.  At least not 
> when I googled it a long time ago.  Whats odd is every one seems to run into 
> the issue.
> 
> As root run this but you can change the port number to your suiting:
>   /usr/sbin/openvasmd -a 0.0.0.0 -p 9393
> If you only want to allow OMP to be hit from the local host change the IP 
> from 0.0.0.0 to 127.0.0.1.  You will need to re-run this every time you 
> restart openvas-manager.
> 
> I have seen and tried adding this to /etc/sysconfig/openvas-manager in the 
> form of:
>   OPTIONS=“—listen 0.0.0.0 —port 9393”
> My only problem with adding this to the sysconfig server file is when I do 
> this I can no longer login to GSAD for some reason.  But so far I have only 
> done this on my slave scanner so its no big deal for me.  When I run it from 
> the CLI all works fine.
> 
> Louis
> :
> Louis Bohm - Sr. Systems Engineer
>   Dell TechDirect Certified
> 
>> On Mar 6, 2018, at 5:34 AM, Shreyas M R  wrote:
>> 
>> Hi, 
>> 
>> Are omp requires the host parameter to connect openvas. for port parameter 
>> -p . Usually its 9390
>> 
>> Try my github link https://github.com/shreyasmrs/OpenVAS 
>> I have tabulated steps to use omp
>> 
>> Thanks
>> Shreyas
>> 
>>  
>> Shreyas M R
>> about.me/shreyasmrs
>> 
>>> On Tue, Mar 6, 2018 at 2:13 PM, Abdallah El.Damiry  
>>> wrote:
>>> Dears ,
>>> 
>>> I have a problem with OMP command when I'm using it in more than a case and 
>>> it's not working.
>>> - Case 1 :
>>># omp -u admin -w pass -g 
>>> Output :  failed to acquire socket 
>>> 
>>> - Case 2 : (redis port 6379)
>>># omp -u admin -w pass -h 127.0.0.1 -p 6379 --xml='' -v
>>> Output :  will try to connect to host 127.0.0.1, port 6379... and no thing 
>>> else
>>> 
>>> Finally when I execute openvas-check-setup , the script finishes with: it 
>>> seems like your openvas-9 installation is ok. 
>>> 
>>> Is there is any solution to this issue ? 
>>> 
>>> Thanks in advance.
>>> 
>>> Yours 
>>> 
>>> AHD
>>> 
>>> ___
>>> Openvas-discuss mailing list
>>> Openvas-discuss@wald.intevation.org
>>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>> 
>> ___
>> Openvas-discuss mailing list
>> Openvas-discuss@wald.intevation.org
>> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
> 
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] OMP Execution Problem

[Louis Bohm]

It does not seem to be listed in many places on the internet.  At least not 
when I googled it a long time ago.  Whats odd is every one seems to run into 
the issue.

As root run this but you can change the port number to your suiting:
/usr/sbin/openvasmd -a 0.0.0.0 -p 9393
If you only want to allow OMP to be hit from the local host change the IP from 
0.0.0.0 to 127.0.0.1.  You will need to re-run this every time you restart 
openvas-manager.

I have seen and tried adding this to /etc/sysconfig/openvas-manager in the form 
of:
OPTIONS=“—listen 0.0.0.0 —port 9393”
My only problem with adding this to the sysconfig server file is when I do this 
I can no longer login to GSAD for some reason.  But so far I have only done 
this on my slave scanner so its no big deal for me.  When I run it from the CLI 
all works fine.

Louis
:
Louis Bohm - Sr. Systems Engineer
Dell TechDirect Certified

> On Mar 6, 2018, at 5:34 AM, Shreyas M R  wrote:
> 
> Hi, 
> 
> Are omp requires the host parameter to connect openvas. for port parameter -p 
> . Usually its 9390
> 
> Try my github link https://github.com/shreyasmrs/OpenVAS 
>  
> I have tabulated steps to use omp
> 
> Thanks
> Shreyas
> 
>   
> 
> 
> Shreyas M R
> about.me/shreyasmrs 
> 
> On Tue, Mar 6, 2018 at 2:13 PM, Abdallah El.Damiry  > wrote:
> Dears ,
> 
> I have a problem with OMP command when I'm using it in more than a case and 
> it's not working.
> - Case 1 :
># omp -u admin -w pass -g 
> Output :  failed to acquire socket 
> 
> - Case 2 : (redis port 6379)
># omp -u admin -w pass -h 127.0.0.1 -p 6379 --xml='' -v
> Output :  will try to connect to host 127.0.0.1, port 6379... and no thing 
> else
> 
> Finally when I execute openvas-check-setup , the script finishes with: it 
> seems like your openvas-9 installation is ok. 
> 
> Is there is any solution to this issue ? 
> 
> Thanks in advance.
> 
> Yours 
> 
> AHD
> 
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org 
> 
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss 
> 
> 
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] Open vas scanner version issue

[Louis Bohm]

Did you do 
openvas-check-scanner —v9
?
:
Louis Bohm - Sr. Systems Engineer
Dell TechDirect Certified

> On Mar 6, 2018, at 12:12 AM, ravi  wrote:
> 
> HI,
> 
> I guess that open vas sanner is installed in my system properly,but when it 
> is checked with openvas-check-setup command,it showed that latest is not 
> installed
> how can i install it.
> 
> My system details :
> OS : centos 7 version
> 
> 
> thank you
> with regards
> ravi
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] OMP Execution Problem

[Thijs Stuurman]

Works fine here and it connects to the openvasmd process, not redis.

“””
root@ivss:~# omp -v -u admin -w XXX --xml=''

WARNING: Verbose mode may reveal passwords!

Will try to connect to host 127.0.0.1, port 9390...
Sending to manager: 
Got response:

AUTHENTICATE   Authenticate with the manager.
COMMANDS   Run a list of commands.
…
“””

Thijs Stuurman
Security Operations Center | KPN Internedservices B.V.
thijs.stuur...@internedservices.nl | 
thijs.stuur...@kpn.com
T: +31(0)299476185 | M: +31(0)624366778
PGP Key-ID: 0x16ADC048 (https://pgp.surfnet.nl/)
Fingerprint: 2EDB 9B42 D6E8 7D4B 6E02 8BE5 6D46 8007 16AD C048

W: https://www.internedservices.nl | L: 
https://nl.linkedin.com/in/thijsstuurman

Van: Openvas-discuss [mailto:openvas-discuss-boun...@wald.intevation.org] 
Namens Abdallah El.Damiry
Verzonden: dinsdag 6 maart 2018 09:43
Aan: openvas-discuss@wald.intevation.org
Onderwerp: [Openvas-discuss] OMP Execution Problem

Dears ,

I have a problem with OMP command when I'm using it in more than a case and 
it's not working.
- Case 1 :
   # omp -u admin -w pass -g
Output :  failed to acquire socket

- Case 2 : (redis port 6379)
   # omp -u admin -w pass -h 127.0.0.1 -p 6379 --xml='' -v
Output :  will try to connect to host 127.0.0.1, port 6379... and no thing else

Finally when I execute openvas-check-setup , the script finishes with: it seems 
like your openvas-9 installation is ok.

Is there is any solution to this issue ?

Thanks in advance.

Yours

AHD
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

Re: [Openvas-discuss] OMP Execution Problem

[Shreyas M R]

Hi,

Are omp requires the host parameter to connect openvas. for port parameter
-p . Usually its 9390

Try my github link https://github.com/shreyasmrs/OpenVAS
I have tabulated steps to use omp

Thanks
Shreyas


Shreyas M R
about.me/shreyasmrs


On Tue, Mar 6, 2018 at 2:13 PM, Abdallah El.Damiry 
wrote:

> Dears ,
>
> I have a problem with OMP command when I'm using it in more than a case
> and it's not working.
> - Case 1 :
># omp -u admin -w pass -g
> Output :  failed to acquire socket
>
> - Case 2 : (redis port 6379)
># omp -u admin -w pass -h 127.0.0.1 -p 6379 --xml='' -v
> Output :  will try to connect to host 127.0.0.1, port 6379... and no thing
> else
>
> Finally when I execute openvas-check-setup , the script finishes with: it
> seems like your openvas-9 installation is ok.
>
> Is there is any solution to this issue ?
>
> Thanks in advance.
>
> Yours
>
> AHD
>
> ___
> Openvas-discuss mailing list
> Openvas-discuss@wald.intevation.org
> https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
>
___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Openvas-discuss] OMP Execution Problem

[Abdallah El.Damiry]

Dears ,

I have a problem with OMP command when I'm using it in more than a case and 
it's not working.
- Case 1 :
   # omp -u admin -w pass -g 
Output :  failed to acquire socket 

- Case 2 : (redis port 6379)
   # omp -u admin -w pass -h 127.0.0.1 -p 6379 --xml='' -v
Output :  will try to connect to host 127.0.0.1, port 6379... and no thing else

Finally when I execute openvas-check-setup , the script finishes with: it seems 
like your openvas-9 installation is ok. 

Is there is any solution to this issue ? 

Thanks in advance.

Yours 

AHD___
Openvas-discuss mailing list
Openvas-discuss@wald.intevation.org
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss