Open-AudIT

I was wondering if someone have got some documentation how to install OAV2 step by step.

The following is in the readme.txt file in the download package.


[quote]How to install OAv2.

1 - Extract the archive to /usr/ (under Ubuntu).
2 - Move the contents of www folder to your root web folder (/var/www under Ubuntu).
3 - Edit the file /var/www/index.php. Line 27/28. Adjust to suit (as per step 1).
4 - in the /usr/OAv2/other folder, run the following command (under Ubuntu)
mysql -u root -p
{enter password}
create database OAv2;
exit;
mysql -u root -p OAv2 < OAv2_mysql.sql
{enter password}
5 - Check file permissions (still to clarify). Easy to just run "sudo chmod -R 777 /usr/OAv2/"
6 - Alter the settings to connect to the database in /usr/OAv2/code_igniter/system/application/config/database.php
7 - Point your web browser to http://YOURSERVER/index.php
8 - Logon with Username: Admin, Password: password
9 - Change password by going to Admin -> List Users -> Edit User

NOTES
You can enable Firebug debugging by setting $config['fireignition_enabled'] = TRUE;
in the file /usr/OAv2/code_igniter/system/application/config/fireignition
This will slow down response, mainly on the "system insert" page - other pages are not affected too much.

You can insert some dummy data by running http://YOURSERVER/index.php/insert_bulk
This will insert 30 systems with minimal data (mainly the system and network details).
Check the /usr/OAv2/code_igniter/system/application/controllers/insert_bulk.php file for altering.

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.

I would continue:

List of required PHP packages (taken from Debian Squeeze (warning: I still have trouble))
[code]ii libapache2-mod-php5 5.3.3-7+squeeze3 server-side, HTML-embedded scripting language (Apache 2 module)
ii php5-cli 5.3.3-7+squeeze3 command-line interpreter for the php5 scripting language
ii php5-common 5.3.3-7+squeeze3 Common files for packages built from the php5 source
ii php5-gd 5.3.3-7+squeeze3 GD module for php5
ii php5-ldap 5.3.3-7+squeeze3 LDAP module for php5
ii php5-mysql 5.3.3-7+squeeze3 MySQL module for php5
ii php5-suhosin 0.9.32.1-1 advanced protection module for php5[/code]


Edit /etc/php5/apache2/php.ini based on Open-AudIT_v2.0/other/php.ini

Thanks 4077 - have altered the first post with chmod -R.
Also, I generally use Ubuntu server and am lazy - hence I run:
sudo apt-get install tasksel
Run "sudo tasksel" and select Lamp Server and you're done

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.

Database permissions seems to also require

GRANT DELETE ON OAv2.oa_user_sessions to 'oa2'@'localhost';

Before the error that prompted me to give the above permisison I had

GRANT CREATE VIEW,SHOW VIEW,UPDATE ON OAv2.* to 'oa2'@'localhost';
GRANT CREATE TEMPORARY TABLES ON OAv2.* to 'oa2'@'localhost';
GRANT INSERT ON OAv2.* to 'oa2'@'localhost';
GRANT SELECT ON OAv2.* to 'oa2'@'localhost';

using index.php/insert_bulk seems to require further SQL permissions. Could we get an official list of those that are needed?

Fixed it with mysql> GRANT DELETE ON OAv2.* to 'oa2'@'localhost';

You'll also need various structure permissions as OpenAudit can add, drop, alter, etc. tables when upgrading to newer versions.

[quote]using index.php/insert_bulk seems to require further SQL permissions.

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.

[quote="Mark"][quote]using index.php/insert_bulk seems to require further SQL permissions.

Hello everyone,

Finelly I had my Friend to install OAv2 on Centos machine. but the configuration part is not done yet. All I need to do is to make this open audit to work with my network but I am Kinda confuse, where to start and how to start. PLease Help me here I would really appreciate it.

So, assuming you have read the reply above and have the dependencies installed, what is not working?
Can you go to your webserver and see the Open-AudIT web page?
Have you run the audit script on a Windows machine (after setting the URL variable)?
What doesn't work?

_________________
Support and Development hours available from [url=https://opmantek.com]Opmantek[/url].
Please consider a purchase to help make Open-AudIT better for everyone.

I have downlaoded windows scrip for beta3 I run it in a XP machine but nothing is showing up in OPen audit which means it didn't audit anything. How do I check URL WEB Variables?

Thank you,

This script run after a while it generates a txt file. when I apload the text file on open-audit it is now showing only one machine that I run Script on.

Also I am not able to see all the details on a audited machine like Keys, Shares, ETC. am I missing anything here? please help.

Make sure you have reviewed the settings at the top of the audit script for what you want it to do. Some of the script versions have settings that are better suited for development than production use.

You want:
[code]
submit_online = "y"
skip_software = "n"
create_file = "n"
[/code]
The create_file option can be "y" but it will clutter your directory with audit files.

The script runs with Error but it doesn't audit anything? how do make this script to audit all my system. should I run it through GPO? Or if i run this in my domain controller is going to audit all the system?