Registrations to Open-AudIT forums are now closed. To ask any new questions please visit Opmantek Community Questions.

Open-AudIT

What's on your network?
It is currently Fri Mar 29, 2024 7:48 am

All times are UTC + 10 hours




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 
Author Message
PostPosted: Tue Jul 22, 2008 11:51 pm 
Offline
Helper

Joined: Fri Aug 25, 2006 12:59 am
Posts: 75
Location: Northeast Pennsylvania
I was looking for a specific software package on all of the audited machines on the network. My audit scripts run locally on all computers every time they log into a system.

When I looked in a specific user's software list, most of the software packages are not listed. When I checked the uninstall list, most of the packages are in there, yet they are still installed on the system!

It appears OA does not see the software, therefore it counts it as uninstalled.

Support ticket:
viewtopic.php?f=10&t=2884

_________________
Server: VM, 4GB RAM, 2 vCPU
Software: Server 2012 R2, OAE 1.6.2
Auditing: 350+ machines (W2K3, W2K8, W2K12, 7, 8, Vista, Linux)
LDAP: Active Directory


Top
 Profile  
Reply with quote  
PostPosted: Fri Jul 25, 2008 11:24 pm 
Offline
Contributor

Joined: Fri Sep 28, 2007 12:07 am
Posts: 189
This issue has been around for a long time now. Hoping it can be addressed soon, as it also increases the size of the DB for no reason at all.

Thanks

Jason

_________________
OA Deployment:
Windows 2003 with XAMPP install
80 Windows Servers
250 Windows workstations (mixed XP and 2000)
5 MACs
Multiple printers, switches, routers, firewalls, and other servers (ESX, AIX etc.)


Top
 Profile  
Reply with quote  
PostPosted: Sat Jul 26, 2008 1:46 am 
Offline
Helper

Joined: Fri Aug 25, 2006 12:59 am
Posts: 75
Location: Northeast Pennsylvania
Just downloaded the latest SVN. Version = 08.07.23

Just tried to locally audit my workstation, and the data went back to the server just fine. My software list is completely vacant. My uninstalled software list is about to burst at the seams with hundreds of software packages. I noticed the list was empty prior to doing the upgrade. I was hoping for whatever reason the new release would fix this. No, it did not.

The following are also empty fields:
Installed Software
System Components
Hotfixes & Patches
Run at Startup
Software Audit-Trail
Keys
IE BHO's
Codecs
Services

Here is the audit.config:
[code]audit_location = "l"
verbose = "y"
audit_host="http://oaserver.domain.lcl"
online = "yesxml"
'online = "n"
strComputer = "."
ie_visible = "n"
ie_auto_submit = "y"
ie_submit_verbose = "y"
ie_form_page = "http://oaserver.domain.lcl/admin_pc_add_1.php"
non_ie_page = "http://oaserver.domain.lcl/admin_pc_add_2.php"
input_file = ""
'
'email_to = ""
'email_from = ""
'email_sender = "My Name"
'email_server = "" ' IP address or FQDN
'email_port = "" ' The SMTP port
'email_auth = "" ' 0 = Anonymous, 1 = Clear-text Authentication, 2 = NTLM
'email_user_id = "" ' A valid Email account in user@domain format
'email_user_pwd = " ' The SMTP email password
'email_use_ssl = "false" ' True/False
'email_timeout = "60" ' In seconds
'
audit_local_domain = "n"
'domain_type = "ldap"
local_domain = "LDAP://DC=domain,DC=lcl"
hfnet = "n"
Count = 0
number_of_audits = 20
script_name = "audit.vbs"
monitor_detect = "y"
printer_detect = "y"
software_audit = "y"
uuid_type = "uuid"
'nmap_subnet = "192.168.1."
'nmap_subnet_formatted = "192.168.001."
'nmap_ie_form_page = "http://myoaserver.mydomain.local/openaudit/admin_nmap_input.php"
'nmap_ie_visible = "n"
'nmap_ie_auto_close = "y"
'nmap_ip_start = 1
'nmap_ip_end = 254
'nmap_tmp_cleanup = true
'keep_audit_log = "n"
[/code]

_________________
Server: VM, 4GB RAM, 2 vCPU
Software: Server 2012 R2, OAE 1.6.2
Auditing: 350+ machines (W2K3, W2K8, W2K12, 7, 8, Vista, Linux)
LDAP: Active Directory


Top
 Profile  
Reply with quote  
PostPosted: Fri Dec 05, 2008 2:19 am 
Offline
Newbie

Joined: Fri Mar 21, 2008 12:31 am
Posts: 16
Location: Denver, Colorado
This happened to me this morning.
It turned out to be something with our network.
Several machines were showing no software installed, and when I looked at the uninstalled software, it was full.
Audit's were also taking much longer than ever before.
I connected the server that host OpenAudit to a different switch on our network, and everything works great now.


Top
 Profile  
Reply with quote  
PostPosted: Fri Dec 05, 2008 9:06 am 
Offline
Moderator
User avatar

Joined: Tue Jan 25, 2005 3:09 am
Posts: 2140
Location: Scotland
Could it be that if the script fails to collect or post a full set of results, the input page assumes the software is now uninstalled, and hence if you have a slow switch or other issue, the audit results are incomplete, and the software disappears from the list. :idea:

If so, we need to some kind of safeguard in the script to avoid the issue, perhaps posting the number of software apps first, followed by the list, if the two don't match, we abandon the update. Better still if we post in XML, then we can add some syntax checking to avoid the issue.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]


Top
 Profile  
Reply with quote  
PostPosted: Sun Dec 07, 2008 6:47 am 
Offline
Contributor

Joined: Fri Sep 28, 2007 12:07 am
Posts: 189
[quote="A_Hull"]Could it be that if the script fails to collect or post a full set of results, the input page assumes the software is now uninstalled, and hence if you have a slow switch or other issue, the audit results are incomplete, and the software disappears from the list. :idea:

If so, we need to some kind of safeguard in the script to avoid the issue, perhaps posting the number of software apps first, followed by the list, if the two don't match, we abandon the update. Better still if we post in XML, then we can add some syntax checking to avoid the issue.


This appears to be a fair compromise. Since we are on this topic of software, it might be also helpful to include the last access date of executables for software usage/metering. It is very helpful to determine if users really require licenses for products, e.g. Office Pro vs. Office Std.

Thanks

Jason

_________________
OA Deployment:
Windows 2003 with XAMPP install
80 Windows Servers
250 Windows workstations (mixed XP and 2000)
5 MACs
Multiple printers, switches, routers, firewalls, and other servers (ESX, AIX etc.)


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 6 posts ] 

All times are UTC + 10 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group