Hi, I have a problem auditing servers using audit_linux.sh script.
I tried launching it locally (./audit_linux.sh -L -o on -U
http://<openaudit server ip>/openaudit/admin_pc_add_2.php) or through a remote server (./audit_linux.sh -R -s <hostname server to audit> -U
http://<openaudit server ip>/openaudit/admin_pc_add_2.php -u root), and all seems to work.
Open-Audit server shows the new server, show many data (for example kernel version, cpus, nic, video card etc etc etc...) but do not show others like serial number, model number, mainboard and others.
On the server I've already installed lshw and seems the audit script using it, I also have HAL service installed and working, but the script always returns "HAL component not found! A lot of information depends on HAL being available" and many "No such file or directory error"
Here is the output from the audit script:
[code]HAL component not found! A lot of information depends on HAL being available
hwinfo not found! Some information will be missing (such as Monitor information).
---------------------------------------------
(Linux) Starting audit of - <server checked> -
---------------------------------------------
audit_linux_ssh.22442 100% 75KB 75.5KB/s 00:00
HAL component not found! A lot of information depends on HAL being available
hwinfo not found! Some information will be missing (such as Monitor information).
xrandr not found! Some information will be missing (Video Adapter information).
--version: No such file or directory
Querying LSHW...
OS Information...
Auditor...
Network Interfaces...
System Model...
In Third IF
--string: No such file or directory
--string: No such file or directory
--string: No such file or directory
--string: No such file or directory
BIOS...
--string: No such file or directory
--string: No such file or directory
--string: No such file or directory
--string: No such file or directory
--string: No such file or directory
--string: No such file or directory
--string: No such file or directory
/bin/date: invalid date `@1279172457'
Processor...
-t: No such file or directory
-t: No such file or directory
Memory...
-t: No such file or directory
Onboard Devices...
-t: No such file or directory
PCI Devices...
Onboard Device...
Onboard Device...
Video Card...
SCSI/SATA Controllers...
Tape Device...
Monitor...
USB Devices...
Motherboard...
Packages...
Printers...
Storage...
Volumes...
Pagefile...
Keyboards...
Mice...
Battery...
-t: No such file or directory
Users...
Crontab...
Groups...
Environment Variables...
Log Files...
Mapped Drives...
IP Routes...
Elapsed time of script: 00h00m16s
Submitting Information...
--19:19:36-- http://<openaudit server>/openaudit/admin_pc_add_2.php
=> `admin_pc_add_2.php'
Connecting to <openaudit server>:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
0K .......... .......... .......... .......... .......... 1.32 MB/s
50K .......... .......... .......... .......... .......... 1.10 MB/s
100K .......... .......... .......... .......... .......... 985.30 KB/s
150K .......... .......... .......... ... 983.06 KB/s
19:19:36 (1.08 MB/s) - `admin_pc_add_2.php' saved [187775]
Removing admin_pc_add_2.php.
Audit report submitted, check above wget output to confirm.[/code]
I'm using an IBM BladeCenter HS20 (8843-21Y) with Red Hat Enterprise Linux ES release 4.4 and these hal rpm packages installed:
- hal-devel-0.4.2-8.EL4
- hal-0.4.2-8.EL4
I'm using Open-Audit version 09.12.23
Thanks for every suggestion