Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WMI scans are not working #5877

Closed
lzammit opened this issue Sep 30, 2020 · 3 comments
Closed

WMI scans are not working #5877

lzammit opened this issue Sep 30, 2020 · 3 comments

Comments

@lzammit
Copy link
Contributor

lzammit commented Sep 30, 2020

Warning: 1048: Column 'report_id' cannot be null:

Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] security event 1200005 added for 00:e0:4c:01:59:ca as open (pf::security_event::security_event_add)
Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] executing action 'log' on class 1200005 (pf::action::action_execute)
Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] /usr/local/pf/logs/security_event.log 2020-09-30 13:57:35: Pre Reg System Scan (1200005) detected on node 00:e0:4c:01:59:ca (172.22.145.172) (pf::action::action_log)
Sep 30 13:57:35 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] Pre Registration Scan - Current Scan Engine is : WMI-Scanner (pf::api::trigger_scan)
Sep 30 13:57:36 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] Instantiate profile Wired-Mac-Auth (pf::Connection::ProfileFactory::_from_profile)
Sep 30 13:57:36 testing-c7 pfqueue: pfqueue(31633) INFO: [mac:00:e0:4c:01:59:ca] New ID generated: 16014886563959ca (pf::util::generate_id)
Sep 30 13:57:36 testing-c7 pfqueue: pfqueue(31633) WARN: [mac:00:e0:4c:01:59:ca] Warning: 1048: Column 'report_id' cannot be null (pf::dal::db_execute)
Sep 30 13:57:36 testing-c7 packetfence_httpd.webservices: httpd.webservices(23844) INFO: [mac:00:e0:4c:01:59:ca] security_event 1200005 closed for 00:e0:4c:01:59:ca (pf::security_event::security_event_close) 
*************************** 1. row ***************************
         id: 16014886563959ca
  tenant_id: 1
         ip: 172.22.145.172
        mac: 172.22.145.172
       type: wmi
 start_date: 2020-09-30 13:57:36
update_date: 2020-09-30 13:57:36
     status: closed
  report_id:
*************************** 2. row ***************************
         id: 16014922577959ca
  tenant_id: 1
         ip: 172.22.145.172
        mac: 172.22.145.172
       type: wmi
 start_date: 2020-09-30 14:57:37
update_date: 2020-09-30 14:57:38
     status: closed
  report_id:
[WMI-Scanner]
wmi_rules=ServicePackUpdated
duration=20s
categories=default
registration=0
username=administrator
domain=WORKGROUP
post_registration=0
password=jsemaanlovesmanchicken
pre_registration=1
type=wmi
@julsemaan
Copy link
Collaborator

@lzammit will test again since the report_id warning seems to be unrelated to the actual issue (WMI isn't working)

@jrouzierinverse
Copy link
Member

@lzammit can we close this?

@lzammit
Copy link
Contributor Author

lzammit commented Oct 7, 2020

I would say yes since it does not prevent the scan from running.

@lzammit lzammit closed this as completed Oct 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants