Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Wed Apr 17, 2024 4:05 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 
Author Message
PostPosted: Tue Mar 23, 2010 9:43 pm 
Offline
Newbie

Joined: Tue Mar 23, 2010 8:37 pm
Posts: 2
Hi,

iam running openaudit on a linux machine and since there is no chance to run the audit.vbs from there iam searching for the best and most effective way (ok, just say the most easy one) to run it directly from the Clients (over 300 in my Network, most of them Windows VMs). i tried to simply copy the audit.vbs to an windowsbox, but when i uncheck the "only use audit.pl" box in the main settings, iam always getting an "sh: /mnt/myserver/openaudit/scripts/audit: not found" Error when iam testing the LDAP Setting in the Audit Configuration. With the only use audit.pl box checked LDAP works fine and finds all of the machines in the network. Found nothing like that in here so I thought it would be best to ask directly
Wich brings my to my next problem: like I said, there are over 300 boxes online (most VMs) but it seems without audit.vbs, openaudit is just able to find about 160. I dont have any clue why .....
And oh yeah, almost forgot to say that the SQL Database and the Webinterface is running on 2 different machines, but dont know if thats important since the setup is made for that.

Thought that someone else hab the same problem before and could post somekind of WMI script for the clients to download the Script from my openaudit site, store it somewhere and execute it after logon of the user. I guess that should be the best way but unfortunately I have no idea how to do that on my own ...

Finally I will post my configfile, hope that helps:
[code]
'
' Standard audit section
'
audit_location = "r"
verbose = "y"
audit_host="http://support"
online = "yesxml"
strComputer = ""
ie_visible = "n"
ie_auto_submit = "y"
ie_submit_verbose = "n"
ie_form_page = audit_host "http://mywebserver/openaudit/admin_pc_add_1.php"
non_ie_page = audit_host "http://mywebserver/openaudit/admin_pc_add_2.php"
input_file = "pc_list_file.txt"

'
' Email authentication
'
'

email_to = "example@example.com"
email_from = "example@example.com"
'email_sender = "Open-AudIT"
email_server = "mail.example.com" ' IP address or FQDN
email_port = "25" ' The SMTP port
email_auth = "1" ' 0 = Anonymous, 1 = Clear-text Authentication, 2 = NTLM
email_user_id = "example@example.com" ' A valid Email account in user@domain format
email_user_pwd = "some_password" ' The SMTP email password
email_use_ssl = "false" ' True/False
email_timeout = "60" ' In seconds
send_email = "false" ' True/False - Enable/Disable email sending

audit_local_domain = "y"
'
' Set domain_type = 'nt' for NT4 or SAMBA otherwise leave blank or set to ldap
'domain_type = ""

local_domain = "LDAP://mydomain"

'
' Example Set Domain name for NT ONLY for LDAP use the above format
' NOTE This is Case Sensetive. See the example below.
'
'local_domain = "WinNT://IEXPLORE"
'local_domain = "WinNT://mydomain"
'

hfnet = "n"
Count = 0
number_of_audits = 10
script_name = "audit.vbs"
monitor_detect = "y"
printer_detect = "y"
software_audit = "y"
uuid_type = "uuid"
'
' Nmap section
'
nmap_tmp_cleanup = true ' Set this false if you want to leave the tmp files for analysis in your tmp folder
nmap_subnet = "196.168.0." ' The subnet you wish to scan
nmap_subnet_formatted = "196.168.000." ' The subnet padded with 0's
nmap_ie_form_page = "http://mywebserver/openauditt/admin_nmap_input.php"
nmap_ie_visible = "n"
nmap_ie_auto_close = "y"
nmap_ip_start = 1
nmap_ip_end = 254

nmap_syn_scan = "y" ' Tcp Syn scan
nmap_udp_scan = "y" ' UDP scan
nmap_srv_ver_scan = "y" ' Service version detection.
nmap_srv_ver_int = 0 ' Service version detection intensity level. Values 0-9, 0=fast
[/code]

Thanks for your time and help and keep up the great work.


Top
 Profile  
Reply with quote  
PostPosted: Thu Mar 25, 2010 5:37 pm 
Offline
Newbie

Joined: Tue Mar 23, 2010 8:37 pm
Posts: 2
Forgot to say that I am getting an
"Expected end of Statement; Code: 800A401; Source: MS VBS compilation error" in line 135 everytime i run audit.vbs on a windows machine.
My config file is in the same spot (posted it above) and tripple checked it.

Pleasde help :(


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group