I did an NDG discovery in a linux box.
Some information in the server tab was polulated like Hardware and Applications.
But Services/Daemons and Open Ports are not polulated.
This tabs should be polulated in a linux box?
If yes, what can be wrong?
Yes, If sudo is in use, ensure the sudoers file can run the necessary commands such as netstat with sudo
Configure sudo for UNIX and Linux Softagent Discovery - CA Configuration Automation - 12.8.3 - CA Technologies Documenta…
You can check the CCA NDG Log in the UI to see the commands run and the if the command has been executed successfully
In log I can see no error for open ports command (netstat -atupnT, but the log shows an error for command chkconfig saying the command was not found.
But If I log into server I´m able to execute the commands successfully
In the logs, do you see:
sudo netstat -atupnT
or just
netstat -atupnT
And when you logged in, did you run:
or
The same questions for chkconfig
just netstat -atupnT
But if I run this command in directly in server it executes
What about chkconfig on the server?
Also, for the netstat, are there any custom headers in the raw data output ?(can you screenshot it from the command itself to the header: please blur out any hostname or other confidential information)
Here are the screenshot.
I think the problem was the error in first line.
There is a way to configure the NDG commands to run as sudo?
And this is the execution of chkconfig
And this apears in log:
CCA-ND-8030: Failed to execute command. Error code = [35] and Error message = [bash: chkconfig: command not found]
Yes, I had a feeling it was something in the header that was messing up with the parsing of the result set
To enable sudo in an NDG discovery, go to the selected Scan Policy and checkbox the 'Enable use of sudo' in the "Discovery Options" tab
Alter enabling the use of sudo in the scan policy, and running the profile again the ndg scan didn´t run the command. he executed other command of virtual environment but not netstat or chkconfig
Can you please clarify; the commands didnt run or the commands ran and didnt produce any output?
Can we get the CCA UI Logs for the NDG scan - please Hide any confidential \ environmental information like hostnames and ips
Those logs wont show the results, just the commands (please hide the last column in the image as that has the hostnames)