Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • Professional Edition
    • Poller

    Description

      Hello,

       

      WMI no longer works when we try to enable it on Windows Server 2022.

      This is the error message :

      WMI Error: Invalid security credentials or insufficient WMI security permissions

      Same configuration and same account work perfectly with Windows Server 2019.

      Could you add support for Windows Server 2022 please ?

      Thanks in advance,

      Attachments

        Activity

          [OBS-3918] wmi not working with Windows Server 2022

          This is bot questions important for checking your issue. You can ignore question about snmpdump, but poller and discovery debug output is required.

          Anyway, wmic binary is outdated for long time (we not maintain or support for it).
          But in latest versions of Observium we integrate different version of WMI script, which should work also with Windows 2022.

          You must update your Observium install than run requested debugs. Attach this debugs here.

          landy Mike Stupalov added a comment - This is bot questions important for checking your issue. You can ignore question about snmpdump, but poller and discovery debug output is required. Anyway, wmic binary is outdated for long time (we not maintain or support for it). But in latest versions of Observium we integrate different version of WMI script, which should work also with Windows 2022. You must update your Observium install than run requested debugs. Attach this debugs here.

          Good Afternoon, 

          I am a frequnt user of Observium but the lack of WMI has started to become a really issue, so I have took the time to find a workable solution to this issue.

          I have managed to get this working, not sure if this is going to help the Observium team, but anyone else is welcome to copy this implementation if they so wish.

          The approach I took was to take the source code from openvas-smb and changed line 508 in lib/com/dcom/main.c to read as follows:

          char *bindstr = talloc_asprintf(c, "ncacn_ip_tcp:%s[sign]", server);

          I then compiled the source and copied the wmic binary generated to /usr/bin.

          I maintained the original winexe binary provided by Observium in there tar.gz archive.

          I am happy to upload the pre-compiled binary if Observium want me to or if they would like me to send it privately for them to test that is also something I can do.

          The source code I amended and compiled is licensed under GNU Public License 2 or later and can be found at the github link below.

          https://github.com/greenbone/openvas-smb

          Thanks
          Chris

          (Just your totally ordinary autistic server nerd)

          Wizard189 Chris Wager added a comment - Good Afternoon,  I am a frequnt user of Observium but the lack of WMI has started to become a really issue, so I have took the time to find a workable solution to this issue. I have managed to get this working, not sure if this is going to help the Observium team, but anyone else is welcome to copy this implementation if they so wish. The approach I took was to take the source code from openvas-smb and changed line 508 in lib/com/dcom/main.c to read as follows: char *bindstr = talloc_asprintf(c, "ncacn_ip_tcp:%s [sign] ", server); I then compiled the source and copied the wmic binary generated to /usr/bin. I maintained the original winexe binary provided by Observium in there tar.gz archive. I am happy to upload the pre-compiled binary if Observium want me to or if they would like me to send it privately for them to test that is also something I can do. The source code I amended and compiled is licensed under GNU Public License 2 or later and can be found at the github link below. https://github.com/greenbone/openvas-smb Thanks Chris (Just your totally ordinary autistic server nerd)
          Cloud Team added a comment -

          Can a human answer my question ?

          We pay for a professional support.

          All informations are already in the initial question.

          Cloud Team added a comment - Can a human answer my question ? We pay for a professional support. All informations are already in the initial question.

          General questions and device support you always can discuss in our Discord channel, click here for connect.


          Please make and attach additional information about the device:

          • full snmp dump from device:

            snmpwalk -v2c -c <community> -t 3 -Cc --hexOutputLength=0 -ObentxU <hostname> .1 > myagent.snmpwalk
            snmpwalk -v2c -c <community> -t 3 -Cc --hexOutputLength=0 -ObentxU <hostname> .1.3.6.1.4.1 >> myagent.snmpwalk

            If device not support SNMP version 2c, replace -v2c with -v1.

          • If you have problems with discovery or poller processes, please do and attach these debugs:

            ./discovery.php -d -h <device>
            ./poller.php -d -h <device>

          • additionally attach device and/or vendor specific MIB files

          This comment is added automatically.

          bot Observium Bot added a comment - General questions and device support you always can discuss in our Discord channel, click here for connect . Please make and attach additional information about the device: full snmp dump from device: snmpwalk -v2c -c <community> -t 3 -Cc --hexOutputLength=0 -ObentxU <hostname> .1 > myagent.snmpwalk snmpwalk -v2c -c <community> -t 3 -Cc --hexOutputLength=0 -ObentxU <hostname> .1.3.6.1.4.1 >> myagent.snmpwalk If device not support SNMP version 2c, replace -v2c with -v1. If you have problems with discovery or poller processes, please do and attach these debugs: ./discovery.php -d -h <device> ./poller.php -d -h <device> additionally attach device and/or vendor specific MIB files This comment is added automatically.

          People

            landy Mike Stupalov
            Cloud Team
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated: