Open-AudIT

Is there a how to on setting up and using this. It sounds like something that could be very useful in my environment.

Thanks,
Chad

Basically, setup a server with Apache/IIS, PHP, and MySQL. Latest versions of each are advisable. Then extract the files from the zip on sourceforge into somewhere on the webserver. From your browser, navigate to setup.php. I may be wrong, but it may fail. In that case, get a newer version of setup.php here:
[quote]http://open-audit.svn.sourceforge.net/viewvc/*checkout*/open-audit/trunk/setup.php?revision=714

I need more step by step as I have never played around with any of this stuff....

Well, then I think this will be the easiest. I am assuming windows, doesn't really matter what version (2k/XP/2003/Vista). Download XAMPP: [url=http://www.apachefriends.org/download.php?xampp-win32-1.6.1-installer.exe]xampp-win32-1.6.1-installer.exe[/url]

Follow their instructions to install if necessary. I'm not really sure what that entails, but just be sure you get Apache2, MySQL5, and PHP5. Then you can find the document root for Apache, and unpack the openaudit files to a directory there. I can take you further after you have completed the above.

I will try and take a look at it at work. Then ask more questions....

Ok I am testing this at home - I get the following error going to http://127.0.0.1/openaudit/index.php -------------

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in C:\xampp\htdocs\openaudit\include.php on line 140

I would suggest getting the latest code, visit here: [url]http://www.open-audit.org/phpBB3/viewtopic.php?f=6&t=1430[/url] (I'm assuming you have the code from sourceforge, if not let me know)

I followed these steps yesterday - viewtopic.php?f=6&t=1414
I got the error I posted above.

I followed the link you sent and same error.

Chad

Can you verify in the database that there is a config_value item in the config table? If you've never looked at a mysql db, check out phpmyadmin (google that). Let me know if you need better directions than that

Ok I figured out how to setup the sql database.

Now if I want to test this at home on my local network what do I need to do to scan an ip address range...

If you want to scan a range, I believe you'd have to use nmap. The actual audit won't scan a range (afaik), but you can either set it to scan a domain or a list of computers. The nmap scan will report much more limited info, and is usually suited for finding devices such as routers or printers.

So I would edit the audit.config file similiar to what is posted under the FAQs and How to Audit a Domain...

audit_location = "r" ( or "l" if the machine doing the auditing is also the web server for OA)
verbose = "y"
online = "yesxml"
strComputer = ""
ie_visible = "n"
ie_auto_submit = "y"
ie_submit_verbose = "n"
ie_form_page = "http://support.mydomain.local/openaudit/admin_pc_add_1.php"
non_ie_page = "http://support.mydomain.local/openaudit/admin_pc_add_2.php"
nmap_subnet = "192.168.10." ' The subnet you wish to scan
nmap_subnet_formatted = "192.168.010." ' The subnet padded with 0's [color=#FF0000]HERE I WOULD USE MY IP RANGE????????[/color]
nmap_ie_form_page = "http://support.mydomain.local/openaudit/admin_nmap_input.php"
nmap_ie_visible = "n"
nmap_ie_auto_close = "y"
nmap_ip_start = 1
nmap_ip_end = 254
input_file = ""
email_to = ""
email_from = ""
email_server = ""
audit_local_domain = "y"
local_domain = "LDAP://mydomain.local"
hfnet = "n"
Count = 0
number_of_audits = 20
script_name = "audit.vbs"
monitor_detect = "y"
printer_detect = "y"
software_audit = "y"
uuid_type = "uuid"

You can modify that, but it is only necessary for the nmap scan. To do an audit, it is completely unnecessary. You didn't answer me though on what you wanted to do!! If you don't want to do an nmap scan now, don't bother with that variable

For now I just want to scan my HOME network for devices(pcs, laptops, printers).

In that case, either set strComputer to a computer name, or set input_file to a text file, in which you put a computer name, one per line.