sxiii / opendlp

Automatically exported from code.google.com/p/opendlp
0 stars 0 forks source link

Server not recieving data from agent. #34

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. Create Scan Profile and deploy scan to client.
2. Wait until agent is deployed, check Scan Results
3. Inspect Status of agent, and log file of client.
4. Pause and then Uninstall the agent after an appropriate waiting time.

What is the expected output? What do you see instead?
Agent Status should eventually move past "-1 Deploying", and results should 
show up on the results page.

What version of the product are you using? On what operating system?
0.4.2. Server operating off provided Virtual Machine (Ubuntu), Client on 
Windows XP VM on VirtualBox.

Please provide any additional information below.
I apologize for starting a new thread on this one, but it's fundamentally 
different from the last problem (which was resolved), and I've spent almost a 
month trying to troubleshoot it with no change.

The agent successfully deploys and begins scanning. Unfortunately, the server 
will not move past the status "Deploying" nor receive results. The server will 
successfully send Pause and Uninstall commands to the client, however, no data 
from the agent seems to get back to the server.

Based on the various logs it looks like the server can successfully connect to 
the client, copy the opendlp files over, and initiate the scan. But the client 
can't seem to actually send results BACK. Apache logs show continuous POST 
requests by the client, but nothing actually changes on the server side, and 
the client log indicates that it gets stuck in a loop waiting for the server to 
answer.

The log file on the client suggests it successfully scans the client, 
identifies the appropriate test files, finishes the scan, and then enters a 
loop where it sends the server a request to uninstall it and waits for that to 
happen.

The majority of these transmissions from the client come back with a libcurl 
error of 0, but at least four times in a 20 minute period, it will return with 
error 23.

On the server side of things, the scan status never changes from -1. The apache 
log files confirm the client is sending numerous HTTP POST requests, and there 
are no new entries in the error log to suggest a malformed request or bad 
credentials.

>[Apache access log snippet]
>[redacted Client VM IP] - ddt [03/Oct/2011:17:30:12 -0400] "POST 
/OpenDLP/results/results.html HTTP/1.1" 200 1834 "-" "-"
>[redacted Client VM IP] - ddt [03/Oct/2011:17:30:13 -0400] "POST 
/OpenDLP/results/results.html HTTP/1.1" 200 1945 "-" "-"

[the above two lines randomly appear continuously, in no particular order, 
interrupted only by GET commands from the VM host when I load up or refresh the 
Results pages]

I've attached the complete client LOG file.

Any help that anyone can provide would be greatly appreciated.

Original issue reported on code.google.com by loum...@gmail.com on 7 Oct 2011 at 8:23

Attachments:

GoogleCodeExporter commented 8 years ago
From the Windows VM, can you start a browser and try to go to the OpenDLP VM's 
web server? You will have to import the certificate into the browser.

Is the "phone home URL" correct in the OpenDLP policy you are using? I 
sometimes run into this issue when I am testing things because VirtualBox's 
DHCP server doesn't seem to remember the old IP addresses for very long.

If you have edited your OpenDLP policy, did you remember to re-enter the "phone 
home password"? For security reasons when editing policies, I do not copy the 
old password to the policy editor screen.

Original comment by andrew.O...@gmail.com on 9 Oct 2011 at 1:39

GoogleCodeExporter commented 8 years ago
I was able to load the OpenDLP VM's web server from the Windows VM.

I confirmed the phonehomeURL was the correct IP address, and that the 
phonehomepassword was the correct one included in the documentation 
("OpenDLPagent")

(Everytime I edit the Profile, I make sure to re-input both the Administrator 
pw and the phonehomepassword, since they always seem to be "gone").

I started a scan on the Windows VM from the Windows VM. 

Nothing has changed. 

Still stuck in the loop, still returning Error 23 every once in awhile.

Original comment by loum...@gmail.com on 10 Oct 2011 at 5:45

GoogleCodeExporter commented 8 years ago
I now have my system working, however have the same problem.

From the apache error log:

access to /OpenDLP/results/results.html failed, reason: user 'ddt' does not 
meet 'require'ments for user/valid-user to be allowed access

I have recreated the .htpasswd file numerous times with the same results as 
well.  Even changed usernames/passwords for the files.  Uploading to results is 
not working.  It deploys just fine however.

Original comment by alphawe...@gmail.com on 6 Jun 2012 at 4:36

GoogleCodeExporter commented 8 years ago
Figured it out.  I commented this line in 
/etc/apache2/sites-available/default-ssl

    ScriptAlias /OpenDLP/ /var/www/OpenDLP/web/bin/
        <Directory "/var/www/OpenDLP/web/bin/results/">
          #Options FollowSymLinks

Now it's reporting.

Original comment by alphawe...@gmail.com on 6 Jun 2012 at 5:13