Hi All
I would like to run an authenticated scan on Unix system. I did add input all information as per this below link, however, the authentication is always failed.
https://discussions.qualys.com/thread/10051
I did cross check with the administrator of this system,but it seems user, password & RSA key is still valid
One thing on this topic is the Unix server is using “Customized SSH port” Is this a problem with this case?
Regards
Hi , I', assuming that you are asking about VM auth scan. In this case, are you sure that your custom ssh port is included in range of scanned TCP Ports ? Check this in your Option Profile in Scan tab under TCP Ports. If you are not doing Full port scan and port is not in Standard Scanned ports, you will need to add it in Additional. This should solve it.
In case you will still have issues , please generate authentication report for this host and let us know what it says ?
regards
Thanks for you advice, however,when I try to add the customized SSH port to the scanned port, Map port and also additional port. It did not pass authentication with error below
Unable to complete login for host=IP address, user=xxxxx
Hi, based on this error message it looks like there is authentication attempt to listening service, but it fails. This means that custom port is not an issue anymore, and you should rather look for cause of failure in credentials. I would advice cross check user & rsa key again , recreate authentication record from scratch and scan. If error will continue to be there I would suggest you to communicate with support@qualys.com - they have tools to investigate further.
Good luck.
Hi Pramote,
I am also seeing same problem. Did you manage to identify and resolve the issue ?
Thanks,
Sameer
Two things you could try.
1. As Andrzej suggests, open a support case. It's better to log it with support and use the SLA to close off your issue in reasonable time.
2. If you want to investigate more yourself, you could try:
On the target system, stop the ssh daemon (remember this will stop all future ssh sessions so use with care). Then start it manually from the command line with the -vvv option (e.g. /usr/sbin/sshd -vvv) as well as your custom port number. That will hold the terminal session on the ssh daemon connection. Then scan the device. You should see the ssh connection from the scanner and the verbose logging will likely tell you where the connection is failing. Find that error message, Ctrl-C out of the daemon, restart the daemon as normal and fix the issue mentioned in the error. Common things are incorrect permissions or owners on the cert or directory it sits in.
Hi, based on this error message it looks like there is authentication attempt to listening service, but it fails. This means that custom port is not an issue anymore, and you should rather look for cause of failure in credentials. I would advice cross check user & rsa key again , recreate authentication record from scratch and scan. If error will continue to be there I would suggest you to communicate with support@qualys.com - they have tools to investigate further.
Good luck.