OpenVas7 Manager to Scanner error

[Brian Diehl]

Hello,
I just completed an upgrade of OpenVas from version 6 to version 7. I am running 64bit Ubuntu 13.10 (Saucy). GSAD works great. I'm able to login and view the results of past scans. However, when I try to launch a new scan it fails with a GSAD status code of error 503, service temporarily down. When I look in /usr/local/var/log/openvas/ the only file with errors in it is openvasmd.log. This is the error I get:

event task:MESSAGE:2014-07-22 16h21.47 CDT:24457: Task 20ba6b3d-ab49-4676-ba04-20b7e81c014a could not be started by admin

Below is the output from the openvas-check-setup script:


Step 1: Checking OpenVAS Scanner ...
OK: OpenVAS Scanner is present in version 4.0.1.
OK: OpenVAS Scanner CA Certificate is present as /usr/local/var/lib/openvas/CA/cacert.pem.
OK: NVT collection in /usr/local/var/lib/openvas/plugins contains 35581 NVTs.
WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner.
SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html).
OK: The NVT cache in /usr/local/var/cache/openvas contains 35582 files for 35581 NVTs.
Step 2: Checking OpenVAS Manager ...
OK: OpenVAS Manager is present in version 5.0.2.
OK: OpenVAS Manager client certificate is present as /usr/local/var/lib/openvas/CA/clientcert.pem.
OK: OpenVAS Manager database found in /usr/local/var/lib/openvas/mgr/tasks.db.
OK: Access rights for the OpenVAS Manager database are correct.
OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled.
OK: OpenVAS Manager database is at revision 123.
OK: OpenVAS Manager expects database at revision 123.
OK: Database schema is up to date.
OK: OpenVAS Manager database contains information about 32692 NVTs.
OK: OpenVAS SCAP database found in /usr/local/var/lib/openvas/scap-data/scap.db.
OK: OpenVAS CERT database found in /usr/local/var/lib/openvas/cert-data/cert.db.
OK: xsltproc found.
Step 3: Checking user configuration ...
WARNING: Your password policy is empty.
SUGGEST: Edit the /usr/local/etc/openvas/pwpolicy.conf file to set a password policy.
Step 4: Checking Greenbone Security Assistant (GSA) ...
OK: Greenbone Security Assistant is present in version 5.0.1.
Step 5: Checking OpenVAS CLI ...
OK: OpenVAS CLI version 1.3.0.
Step 6: Checking Greenbone Security Desktop (GSD) ...
SKIP: Skipping check for Greenbone Security Desktop.
Step 7: Checking if OpenVAS services are up and running ...
OK: netstat found, extended checks of the OpenVAS services enabled.
OK: OpenVAS Scanner is running and listening on all interfaces.
OK: OpenVAS Scanner is listening on port 9391, which is the default port.
OK: OpenVAS Manager is running and listening on all interfaces.
OK: OpenVAS Manager is listening on port 9390, which is the default port.
OK: Greenbone Security Assistant is running and listening on all interfaces.
OK: Greenbone Security Assistant is listening on port 443, which is the default port.
Step 8: Checking nmap installation ...
WARNING: Your version of nmap is not fully supported: 6.40
SUGGEST: You should install nmap 5.51.
Step 9: Checking presence of optional tools ...
OK: pdflatex found.
WARNING: PDF generation failed, most likely due to missing LaTeX packages. The PDF report format will not work.
SUGGEST: Install required LaTeX packages.
OK: ssh-keygen found, LSC credential generation for GNU/Linux targets is likely to work.
WARNING: Could not find rpm binary, LSC credential package generation for RPM and DEB based targets will not work.
SUGGEST: Install rpm.
WARNING: Could not find makensis binary, LSC credential package generation for Microsoft Windows targets will not work.
SUGGEST: Install nsis.

It seems like your OpenVAS-7 installation is OK.


Any thoughts?

Thank you in advance.

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]

[Brandon Perry]

What happens when you try to start a scan with raw OMP? <start_task /> iirc

Post by Brian Diehl
Hello,
I just completed an upgrade of OpenVas from version 6 to version 7. I am
running 64bit Ubuntu 13.10 (Saucy). GSAD works great. I’m able to login
and view the results of past scans. However, when I try to launch a new
scan it fails with a GSAD status code of error 503, service temporarily
down. When I look in /usr/local/var/log/openvas/ the only file with errors
event task:MESSAGE:2014-07-22 16h21.47 CDT:24457: Task
20ba6b3d-ab49-4676-ba04-20b7e81c014a could not be started by admin
Step 1: Checking OpenVAS Scanner ...
OK: OpenVAS Scanner is present in version 4.0.1.
OK: OpenVAS Scanner CA Certificate is present as
/usr/local/var/lib/openvas/CA/cacert.pem.
OK: NVT collection in /usr/local/var/lib/openvas/plugins contains 35581 NVTs.
WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner.
SUGGEST: Enable signature checking (see
http://www.openvas.org/trusted-nvts.html).
OK: The NVT cache in /usr/local/var/cache/openvas contains 35582
files for 35581 NVTs.
Step 2: Checking OpenVAS Manager ...
OK: OpenVAS Manager is present in version 5.0.2.
OK: OpenVAS Manager client certificate is present as
/usr/local/var/lib/openvas/CA/clientcert.pem.
OK: OpenVAS Manager database found in
/usr/local/var/lib/openvas/mgr/tasks.db.
OK: Access rights for the OpenVAS Manager database are correct.
OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled.
OK: OpenVAS Manager database is at revision 123.
OK: OpenVAS Manager expects database at revision 123.
OK: Database schema is up to date.
OK: OpenVAS Manager database contains information about 32692 NVTs.
OK: OpenVAS SCAP database found in
/usr/local/var/lib/openvas/scap-data/scap.db.
OK: OpenVAS CERT database found in
/usr/local/var/lib/openvas/cert-data/cert.db.
OK: xsltproc found.
Step 3: Checking user configuration ...
WARNING: Your password policy is empty.
SUGGEST: Edit the /usr/local/etc/openvas/pwpolicy.conf file to set
a password policy.
Step 4: Checking Greenbone Security Assistant (GSA) ...
OK: Greenbone Security Assistant is present in version 5.0.1.
Step 5: Checking OpenVAS CLI ...
OK: OpenVAS CLI version 1.3.0.
Step 6: Checking Greenbone Security Desktop (GSD) ...
SKIP: Skipping check for Greenbone Security Desktop.
Step 7: Checking if OpenVAS services are up and running ...
OK: netstat found, extended checks of the OpenVAS services enabled.
OK: OpenVAS Scanner is running and listening on all interfaces.
OK: OpenVAS Scanner is listening on port 9391, which is the default port.
OK: OpenVAS Manager is running and listening on all interfaces.
OK: OpenVAS Manager is listening on port 9390, which is the default port.
OK: Greenbone Security Assistant is running and listening on all interfaces.
OK: Greenbone Security Assistant is listening on port 443, which
is the default port.
Step 8: Checking nmap installation ...
WARNING: Your version of nmap is not fully supported: 6.40
SUGGEST: You should install nmap 5.51.
Step 9: Checking presence of optional tools ...
OK: pdflatex found.
WARNING: PDF generation failed, most likely due to missing LaTeX
packages. The PDF report format will not work.
SUGGEST: Install required LaTeX packages.
OK: ssh-keygen found, LSC credential generation for GNU/Linux
targets is likely to work.
WARNING: Could not find rpm binary, LSC credential package
generation for RPM and DEB based targets will not work.
SUGGEST: Install rpm.
WARNING: Could not find makensis binary, LSC credential package
generation for Microsoft Windows targets will not work.
SUGGEST: Install nsis.
It seems like your OpenVAS-7 installation is OK.
Any thoughts?
Thank you in advance.
Brian Diehl
Christensen Farms IT Manager
Phone: [phone]
_______________________________________________
Openvas-discuss mailing list
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Brandon Perry]

You can also use the omp to directly list the current statuses of the tasks
in the database. Does this say that scan hasn't started?

Nothing appears to happen including nothing in the logs. Here is the
Tue Jul 22 17:11:33 CDT 2014
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log
-S 20ba6b3d-ab49-4676-ba04-20b7e81c014a
0
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log
root 25093 1 5 17:06 ? 00:00:20 openvassd: Waiting for
incoming connections
root 25097 1 0 17:06 pts/1 00:00:00 openvasmd
Brian Diehl
Christensen Farms IT Manager
Phone: [phone]
*Sent:* Tuesday, July 22, 2014 5:06 PM
*To:* Brian Diehl
*Subject:* Re: [Openvas-discuss] OpenVas7 Manager to Scanner error
What happens when you try to start a scan with raw OMP? <start_task /> iirc
Hello,
I just completed an upgrade of OpenVas from version 6 to version 7. I am
running 64bit Ubuntu 13.10 (Saucy). GSAD works great. I’m able to login
and view the results of past scans. However, when I try to launch a new
scan it fails with a GSAD status code of error 503, service temporarily
down. When I look in /usr/local/var/log/openvas/ the only file with errors
event task:MESSAGE:2014-07-22 16h21.47 CDT:24457: Task
20ba6b3d-ab49-4676-ba04-20b7e81c014a could not be started by admin
Step 1: Checking OpenVAS Scanner ...
OK: OpenVAS Scanner is present in version 4.0.1.
OK: OpenVAS Scanner CA Certificate is present as
/usr/local/var/lib/openvas/CA/cacert.pem.
OK: NVT collection in /usr/local/var/lib/openvas/plugins contains 35581 NVTs.
WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner.
SUGGEST: Enable signature checking (see
http://www.openvas.org/trusted-nvts.html).
OK: The NVT cache in /usr/local/var/cache/openvas contains 35582
files for 35581 NVTs.
Step 2: Checking OpenVAS Manager ...
OK: OpenVAS Manager is present in version 5.0.2.
OK: OpenVAS Manager client certificate is present as
/usr/local/var/lib/openvas/CA/clientcert.pem.
OK: OpenVAS Manager database found in
/usr/local/var/lib/openvas/mgr/tasks.db.
OK: Access rights for the OpenVAS Manager database are correct.
OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled.
OK: OpenVAS Manager database is at revision 123.
OK: OpenVAS Manager expects database at revision 123.
OK: Database schema is up to date.
OK: OpenVAS Manager database contains information about 32692 NVTs.
OK: OpenVAS SCAP database found in
/usr/local/var/lib/openvas/scap-data/scap.db.
OK: OpenVAS CERT database found in
/usr/local/var/lib/openvas/cert-data/cert.db.
OK: xsltproc found.
Step 3: Checking user configuration ...
WARNING: Your password policy is empty.
SUGGEST: Edit the /usr/local/etc/openvas/pwpolicy.conf file to set
a password policy.
Step 4: Checking Greenbone Security Assistant (GSA) ...
OK: Greenbone Security Assistant is present in version 5.0.1.
Step 5: Checking OpenVAS CLI ...
OK: OpenVAS CLI version 1.3.0.
Step 6: Checking Greenbone Security Desktop (GSD) ...
SKIP: Skipping check for Greenbone Security Desktop.
Step 7: Checking if OpenVAS services are up and running ...
OK: netstat found, extended checks of the OpenVAS services enabled.
OK: OpenVAS Scanner is running and listening on all interfaces.
OK: OpenVAS Scanner is listening on port 9391, which is the default port.
OK: OpenVAS Manager is running and listening on all interfaces.
OK: OpenVAS Manager is listening on port 9390, which is the default port.
OK: Greenbone Security Assistant is running and listening on all interfaces.
OK: Greenbone Security Assistant is listening on port 443, which
is the default port.
Step 8: Checking nmap installation ...
WARNING: Your version of nmap is not fully supported: 6.40
SUGGEST: You should install nmap 5.51.
Step 9: Checking presence of optional tools ...
OK: pdflatex found.
WARNING: PDF generation failed, most likely due to missing LaTeX
packages. The PDF report format will not work.
SUGGEST: Install required LaTeX packages.
OK: ssh-keygen found, LSC credential generation for GNU/Linux
targets is likely to work.
WARNING: Could not find rpm binary, LSC credential package
generation for RPM and DEB based targets will not work.
SUGGEST: Install rpm.
WARNING: Could not find makensis binary, LSC credential package
generation for Microsoft Windows targets will not work.
SUGGEST: Install nsis.
It seems like your OpenVAS-7 installation is OK.
Any thoughts?
Thank you in advance.
Brian Diehl
Christensen Farms IT Manager
Phone: [phone]
_______________________________________________
Openvas-discuss mailing list
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
--
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website
Submit Spam
<https://admin.securence.com/shaqSubmitSpam.php?sid=1406066776229-017-01246964&to=bdiehl%40christensenfarms.com&id=882D0305FBFD7>

[Brian Diehl]

Nothing appears to happen including nothing in the logs. Here is the output from the screen capture in case I’m doing something wrong:

***@ubuntu1:/usr/local/var/log/openvas$ date
Tue Jul 22 17:11:33 CDT 2014
***@ubuntu1:/usr/local/var/log/openvas$ ls -ltr
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log
***@ubuntu1:/usr/local/var/log/openvas$ sudo omp -v -u admin -w admin -S 20ba6b3d-ab49-4676-ba04-20b7e81c014a
***@ubuntu1:/usr/local/var/log/openvas$ echo $?
0
***@ubuntu1:/usr/local/var/log/openvas$ ls -ltr
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log

***@ubuntu1:/usr/local/var/log/openvas$ ps -ef | grep open
root 25093 1 5 17:06 ? 00:00:20 openvassd: Waiting for incoming connections
root 25097 1 0 17:06 pts/1 00:00:00 openvasmd

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]

From: Brandon Perry [mailto:***@gmail.com]
Sent: Tuesday, July 22, 2014 5:06 PM
To: Brian Diehl
Cc: openvas-***@wald.intevation.org
Subject: Re: [Openvas-discuss] OpenVas7 Manager to Scanner error

What happens when you try to start a scan with raw OMP? <start_task /> iirc

On Tue, Jul 22, 2014 at 4:54 PM, Brian Diehl <***@christensenfarms.com<mailto:***@christensenfarms.com>> wrote:
Hello,
I just completed an upgrade of OpenVas from version 6 to version 7. I am running 64bit Ubuntu 13.10 (Saucy). GSAD works great. I’m able to login and view the results of past scans. However, when I try to launch a new scan it fails with a GSAD status code of error 503, service temporarily down. When I look in /usr/local/var/log/openvas/ the only file with errors in it is openvasmd.log. This is the error I get:

event task:MESSAGE:2014-07-22 16h21.47 CDT:24457: Task 20ba6b3d-ab49-4676-ba04-20b7e81c014a could not be started by admin

Below is the output from the openvas-check-setup script:


Step 1: Checking OpenVAS Scanner ...
OK: OpenVAS Scanner is present in version 4.0.1.
OK: OpenVAS Scanner CA Certificate is present as /usr/local/var/lib/openvas/CA/cacert.pem.
OK: NVT collection in /usr/local/var/lib/openvas/plugins contains 35581 NVTs.
WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner.
SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html).
OK: The NVT cache in /usr/local/var/cache/openvas contains 35582 files for 35581 NVTs.
Step 2: Checking OpenVAS Manager ...
OK: OpenVAS Manager is present in version 5.0.2.
OK: OpenVAS Manager client certificate is present as /usr/local/var/lib/openvas/CA/clientcert.pem.
OK: OpenVAS Manager database found in /usr/local/var/lib/openvas/mgr/tasks.db.
OK: Access rights for the OpenVAS Manager database are correct.
OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled.
OK: OpenVAS Manager database is at revision 123.
OK: OpenVAS Manager expects database at revision 123.
OK: Database schema is up to date.
OK: OpenVAS Manager database contains information about 32692 NVTs.
OK: OpenVAS SCAP database found in /usr/local/var/lib/openvas/scap-data/scap.db.
OK: OpenVAS CERT database found in /usr/local/var/lib/openvas/cert-data/cert.db.
OK: xsltproc found.
Step 3: Checking user configuration ...
WARNING: Your password policy is empty.
SUGGEST: Edit the /usr/local/etc/openvas/pwpolicy.conf file to set a password policy.
Step 4: Checking Greenbone Security Assistant (GSA) ...
OK: Greenbone Security Assistant is present in version 5.0.1.
Step 5: Checking OpenVAS CLI ...
OK: OpenVAS CLI version 1.3.0.
Step 6: Checking Greenbone Security Desktop (GSD) ...
SKIP: Skipping check for Greenbone Security Desktop.
Step 7: Checking if OpenVAS services are up and running ...
OK: netstat found, extended checks of the OpenVAS services enabled.
OK: OpenVAS Scanner is running and listening on all interfaces.
OK: OpenVAS Scanner is listening on port 9391, which is the default port.
OK: OpenVAS Manager is running and listening on all interfaces.
OK: OpenVAS Manager is listening on port 9390, which is the default port.
OK: Greenbone Security Assistant is running and listening on all interfaces.
OK: Greenbone Security Assistant is listening on port 443, which is the default port.
Step 8: Checking nmap installation ...
WARNING: Your version of nmap is not fully supported: 6.40
SUGGEST: You should install nmap 5.51.
Step 9: Checking presence of optional tools ...
OK: pdflatex found.
WARNING: PDF generation failed, most likely due to missing LaTeX packages. The PDF report format will not work.
SUGGEST: Install required LaTeX packages.
OK: ssh-keygen found, LSC credential generation for GNU/Linux targets is likely to work.
WARNING: Could not find rpm binary, LSC credential package generation for RPM and DEB based targets will not work.
SUGGEST: Install rpm.
WARNING: Could not find makensis binary, LSC credential package generation for Microsoft Windows targets will not work.
SUGGEST: Install nsis.

It seems like your OpenVAS-7 installation is OK.


Any thoughts?

Thank you in advance.

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]<tel:[phone]>




_______________________________________________
Openvas-discuss mailing list
Openvas-***@wald.intevation.org<mailto:Openvas-***@wald.intevation.org>
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss

[Brian Diehl]

Also – is there a setting to enable that would allow me to get more feedback from omp on what it is doing? I’m thinking there may be something I can set at compile time to turn on debugging, or the like. Thanks.

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]

From: Brian Diehl [mailto:***@christensenfarms.com]
Sent: Tuesday, July 22, 2014 5:13 PM
To: Brandon Perry
Cc: openvas-***@wald.intevation.org
Subject: Re: [Openvas-discuss] OpenVas7 Manager to Scanner error

Nothing appears to happen including nothing in the logs. Here is the output from the screen capture in case I’m doing something wrong:

***@ubuntu1:/usr/local/var/log/openvas$ date
Tue Jul 22 17:11:33 CDT 2014
***@ubuntu1:/usr/local/var/log/openvas$ ls -ltr
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log
***@ubuntu1:/usr/local/var/log/openvas$ sudo omp -v -u admin -w admin -S 20ba6b3d-ab49-4676-ba04-20b7e81c014a
***@ubuntu1:/usr/local/var/log/openvas$ echo $?
0
***@ubuntu1:/usr/local/var/log/openvas$ ls -ltr
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log

***@ubuntu1:/usr/local/var/log/openvas$ ps -ef | grep open
root 25093 1 5 17:06 ? 00:00:20 openvassd: Waiting for incoming connections
root 25097 1 0 17:06 pts/1 00:00:00 openvasmd

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]

From: Brandon Perry [mailto:***@gmail.com]
Sent: Tuesday, July 22, 2014 5:06 PM
To: Brian Diehl
Cc: openvas-***@wald.intevation.org<mailto:openvas-***@wald.intevation.org>
Subject: Re: [Openvas-discuss] OpenVas7 Manager to Scanner error

What happens when you try to start a scan with raw OMP? <start_task /> iirc

[Jan-Oliver Wagner]

Also – is there a setting to enable that would allow me to get more feedback from omp on what it is doing? I’m thinking there may be something I can set at compile time to turn on debugging, or the like. Thanks.

if you increase the log level of openvasmd you will get more details.
Very detailed details ;-)

[Brian Diehl]

Omp shows the task as not having started.

***@ubuntu1:/usr/local/var/log/openvas$ sudo omp -u admin -w -G
83dadfdd-af6a-4edc-aece-a5a7324f7dce Done Azure DB
aa6d7a92-5fba-45d7-9cc7-5e21892705d4 Done cfse-print01t
943325f0-cdfa-4d1d-b396-2f87845b257a Done cfse-sl01t
d17123da-d3e5-4fc2-b130-d13994e46871 Done l2188
e5409291-dfb5-45ce-b88c-52d9a14b528e Done Server Network
20ba6b3d-ab49-4676-ba04-20b7e81c014a Done ubuntu1
***@ubuntu1:/usr/local/var/log/openvas$ sudo omp -v -u admin -w -S 20ba6b3d-ab49-4676-ba04-20b7e81c014a
***@ubuntu1:/usr/local/var/log/openvas$ sudo omp -u admin -w -G
83dadfdd-af6a-4edc-aece-a5a7324f7dce Done Azure DB
aa6d7a92-5fba-45d7-9cc7-5e21892705d4 Done cfse-print01t
943325f0-cdfa-4d1d-b396-2f87845b257a Done cfse-sl01t
d17123da-d3e5-4fc2-b130-d13994e46871 Done l2188
e5409291-dfb5-45ce-b88c-52d9a14b528e Done Server Network
20ba6b3d-ab49-4676-ba04-20b7e81c014a Done ubuntu1
***@ubuntu1:/usr/local/var/log/openvas$ sudo omp -u admin -w -G
83dadfdd-af6a-4edc-aece-a5a7324f7dce Done Azure DB
aa6d7a92-5fba-45d7-9cc7-5e21892705d4 Done cfse-print01t
943325f0-cdfa-4d1d-b396-2f87845b257a Done cfse-sl01t
d17123da-d3e5-4fc2-b130-d13994e46871 Done l2188
e5409291-dfb5-45ce-b88c-52d9a14b528e Done Server Network
20ba6b3d-ab49-4676-ba04-20b7e81c014a Done ubuntu1

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]

From: Brandon Perry [mailto:***@gmail.com]
Sent: Tuesday, July 22, 2014 5:16 PM
To: Brian Diehl
Cc: openvas-***@wald.intevation.org
Subject: Re: [Openvas-discuss] OpenVas7 Manager to Scanner error

You can also use the omp to directly list the current statuses of the tasks in the database. Does this say that scan hasn't started?

On Tue, Jul 22, 2014 at 5:13 PM, Brian Diehl <***@christensenfarms.com<mailto:***@christensenfarms.com>> wrote:
Nothing appears to happen including nothing in the logs. Here is the output from the screen capture in case I’m doing something wrong:

***@ubuntu1:/usr/local/var/log/openvas$ date
Tue Jul 22 17:11:33 CDT 2014
***@ubuntu1:/usr/local/var/log/openvas$ ls -ltr
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log
***@ubuntu1:/usr/local/var/log/openvas$ sudo omp -v -u admin -w admin -S 20ba6b3d-ab49-4676-ba04-20b7e81c014a
***@ubuntu1:/usr/local/var/log/openvas$ echo $?
0
***@ubuntu1:/usr/local/var/log/openvas$ ls -ltr
total 104
-rw-r--r-- 1 root root 88 Jul 22 17:01 openvasad.log
-rw-r--r-- 1 root root 3508 Jul 22 17:06 gsad.log
-rw-r--r-- 1 root root 297 Jul 22 17:06 openvassd.messages
-rw------- 1 root root 86179 Jul 22 17:07 openvasmd.log

***@ubuntu1:/usr/local/var/log/openvas$ ps -ef | grep open
root 25093 1 5 17:06 ? 00:00:20 openvassd: Waiting for incoming connections
root 25097 1 0 17:06 pts/1 00:00:00 openvasmd

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]<tel:[phone]>

From: Brandon Perry [mailto:***@gmail.com<mailto:***@gmail.com>]
Sent: Tuesday, July 22, 2014 5:06 PM
To: Brian Diehl
Cc: openvas-***@wald.intevation.org<mailto:openvas-***@wald.intevation.org>
Subject: Re: [Openvas-discuss] OpenVas7 Manager to Scanner error

What happens when you try to start a scan with raw OMP? <start_task /> iirc

On Tue, Jul 22, 2014 at 4:54 PM, Brian Diehl <***@christensenfarms.com<mailto:***@christensenfarms.com>> wrote:
Hello,
I just completed an upgrade of OpenVas from version 6 to version 7. I am running 64bit Ubuntu 13.10 (Saucy). GSAD works great. I’m able to login and view the results of past scans. However, when I try to launch a new scan it fails with a GSAD status code of error 503, service temporarily down. When I look in /usr/local/var/log/openvas/ the only file with errors in it is openvasmd.log. This is the error I get:

event task:MESSAGE:2014-07-22 16h21.47 CDT:24457: Task 20ba6b3d-ab49-4676-ba04-20b7e81c014a could not be started by admin

Below is the output from the openvas-check-setup script:


Step 1: Checking OpenVAS Scanner ...
OK: OpenVAS Scanner is present in version 4.0.1.
OK: OpenVAS Scanner CA Certificate is present as /usr/local/var/lib/openvas/CA/cacert.pem.
OK: NVT collection in /usr/local/var/lib/openvas/plugins contains 35581 NVTs.
WARNING: Signature checking of NVTs is not enabled in OpenVAS Scanner.
SUGGEST: Enable signature checking (see http://www.openvas.org/trusted-nvts.html).
OK: The NVT cache in /usr/local/var/cache/openvas contains 35582 files for 35581 NVTs.
Step 2: Checking OpenVAS Manager ...
OK: OpenVAS Manager is present in version 5.0.2.
OK: OpenVAS Manager client certificate is present as /usr/local/var/lib/openvas/CA/clientcert.pem.
OK: OpenVAS Manager database found in /usr/local/var/lib/openvas/mgr/tasks.db.
OK: Access rights for the OpenVAS Manager database are correct.
OK: sqlite3 found, extended checks of the OpenVAS Manager installation enabled.
OK: OpenVAS Manager database is at revision 123.
OK: OpenVAS Manager expects database at revision 123.
OK: Database schema is up to date.
OK: OpenVAS Manager database contains information about 32692 NVTs.
OK: OpenVAS SCAP database found in /usr/local/var/lib/openvas/scap-data/scap.db.
OK: OpenVAS CERT database found in /usr/local/var/lib/openvas/cert-data/cert.db.
OK: xsltproc found.
Step 3: Checking user configuration ...
WARNING: Your password policy is empty.
SUGGEST: Edit the /usr/local/etc/openvas/pwpolicy.conf file to set a password policy.
Step 4: Checking Greenbone Security Assistant (GSA) ...
OK: Greenbone Security Assistant is present in version 5.0.1.
Step 5: Checking OpenVAS CLI ...
OK: OpenVAS CLI version 1.3.0.
Step 6: Checking Greenbone Security Desktop (GSD) ...
SKIP: Skipping check for Greenbone Security Desktop.
Step 7: Checking if OpenVAS services are up and running ...
OK: netstat found, extended checks of the OpenVAS services enabled.
OK: OpenVAS Scanner is running and listening on all interfaces.
OK: OpenVAS Scanner is listening on port 9391, which is the default port.
OK: OpenVAS Manager is running and listening on all interfaces.
OK: OpenVAS Manager is listening on port 9390, which is the default port.
OK: Greenbone Security Assistant is running and listening on all interfaces.
OK: Greenbone Security Assistant is listening on port 443, which is the default port.
Step 8: Checking nmap installation ...
WARNING: Your version of nmap is not fully supported: 6.40
SUGGEST: You should install nmap 5.51.
Step 9: Checking presence of optional tools ...
OK: pdflatex found.
WARNING: PDF generation failed, most likely due to missing LaTeX packages. The PDF report format will not work.
SUGGEST: Install required LaTeX packages.
OK: ssh-keygen found, LSC credential generation for GNU/Linux targets is likely to work.
WARNING: Could not find rpm binary, LSC credential package generation for RPM and DEB based targets will not work.
SUGGEST: Install rpm.
WARNING: Could not find makensis binary, LSC credential package generation for Microsoft Windows targets will not work.
SUGGEST: Install nsis.

It seems like your OpenVAS-7 installation is OK.


Any thoughts?

Thank you in advance.

Brian Diehl
Christensen Farms IT Manager
Phone: [phone]<tel:[phone]>




_______________________________________________
Openvas-discuss mailing list
Openvas-***@wald.intevation.org<mailto:Openvas-***@wald.intevation.org>
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-discuss
--
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website

Submit Spam<https://admin.securence.com/shaqSubmitSpam.php?sid=1406066776229-017-01246964&to=bdiehl%40christensenfarms.com&id=882D0305FBFD7>