Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot use space in username #185

Closed
TheGroundZero opened this issue Sep 13, 2018 · 2 comments
Closed

Cannot use space in username #185

TheGroundZero opened this issue Sep 13, 2018 · 2 comments

Comments

@TheGroundZero
Copy link

Expected behavior

Successfully create a new credential with a space in the username.

Current behavior

(Status code: 400) Operation 'Create Credential' failed
Given login was invalid

Steps to reproduce

  1. Create a new credential
  2. Enter username with a space in it
  3. Try to save credential

GVM versions

gsa: (gsad --version)
7.0.3

gvm: (gvmd --version)
/

openvas-scanner: (openvassd --version)
5.1.3

gvm-libs:

openvas-smb:

Environment

Operating system:
Greenbone Security Manager Community Edition

Installation method / source: (packages, source installation)
ISO from site

Logfiles


This issue was originaly opened under openvas-scanner.

While it is strongly discouraged because it may other systems, Windows (and perhaps other OSes) allow users to create accounts with a space in the username.

It'd be nice if the tool allows you to create such credential to be used by the scanner.
If not, I would suggest to at least include a more descriptive error message ( e.g. "Username cannot contain whitespace" or "Unsupported character used in field username").

@cfi-gb
Copy link
Member

cfi-gb commented Jan 12, 2019

If not, I would suggest to at least include a more descriptive error message ( e.g. "Username cannot contain whitespace" or "Unsupported character used in field username").

Seems this is now done via #59 from April 2018 and will be shipped with the next openvas-manager 7.0 release.

Also quoting @bjoernricks from #312 (comment):

That's not an easy task as it sounds first. Due to local policies and different operating systems some usernames might be valid on one system but not on the other. There is no username rule that fits for all systems.

We are aware of these problems and are thinking about something like "test these credentials to login into this system" functionality. But this is in an early stage and will take some time.

@bjoernricks
Copy link
Contributor

Should be re-tested with current version. If it is still valid please re-open.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants