audit_windows.vbs(3420, 13) Active Directory : Unspecified error

 
1
0
-1

version 2.3.0 (had same error with 2.2.7) running on CentOS. Does anybody know how to fix this problem with some Windows systems that aren't members of any domain or active directory? When this happens no results get submitted

 

Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

starting audit - 10.x.m.xyz
----------------------------
Open-AudIT Windows audit script
Version: 2.3.0
----------------------------
audit_dns n
audit_mount_point n
audit_netstat n
audit_software y
create_file n
debugging 1
details_to_lower y
discovery_id
hide_audit_window n
ldap
org_id
ping_target n
self_delete n
strcomputer
strpass
struser
submit_online y
system_id
url http://lnx544434/open-audit/index.php/input/devices
use_proxy n
windows_user_work_1 physicalDeliveryOfficeName
windows_user_work_2 company
-------------------
Not pinging target (override with ping_target=y).
My PID is 4672
Audit Start Time 2018-12-21 13:41:28
Audit Location remote
-------------------
system info
windows info
bios info
scsi info
processor info
memory info
motherboard info
optical info
video info
wmi monitor info
sound info
disk info
partition info
shares info
network card info
network address info
print queue info
environment variables
logs
pagefile
local users info
local groups info
I:\share1\Downloads\OpenAudit\scans\audit_windows.vbs(3420, 13) Active Directory
: Unspecified error

 for the record here is line 3420

 

            set colGroups = objDSO.OpenDSObject("WinNT://" & system_hostname & "", struser, strpass, ADS_USE_ENCRYPTION OR ADS_SECURE_AUTHENTICATION)

 

 

 

    CommentAdd your comment...

    2 answers

    1.  
      1
      0
      -1

      I will try this on Monday. Thank you Mark, have a great weekend

        CommentAdd your comment...
      1.  
        1
        0
        -1

        You can try wrapping it in an "on error" as below,

         

            if struser > "" then
        set colItems = objWMIService.ExecQuery("Select * from Win32_Group where Domain = '" & system_hostname & "'",,32)
        error_returned = Err.Number : if (error_returned <> 0 and debugging > "0") then wscript.echo check_wbem_error(error_returned) & " (Win32_Group)" : audit_wmi_fails = audit_wmi_fails & "Win32_Group " : end if
        for Each objItem in colItems
            users = ""
            set objDSO = GetObject("WinNT:")
            on error resume next
                set colGroups = objDSO.OpenDSObject("WinNT://" & system_hostname & "", struser, strpass, ADS_USE_ENCRYPTION OR ADS_SECURE_AUTHENTICATION)
                colGroups.Filter = Array("group")
                group_members = ""
                for Each objGroup In colGroups
                    if objGroup.Name = objItem.Name then
                        for each objUser in objGroup.Members
                            group_domain = split(objUser.ADSPath, "/")
                            member_domain = group_domain(ubound(group_domain)-1)
                            group_members = group_members & objUser.Name & "@" & member_domain & ", "
                        next
                    end if
                next
                result.WriteText "      <item>" & vbcrlf
                result.WriteText "          <name>" & escape_xml(objItem.Name) & "</name>" & vbcrlf
                result.WriteText "          <description>" & escape_xml(objItem.Description) & "</description>" & vbcrlf
                result.WriteText "          <sid>" & escape_xml(objItem.SID) & "</sid>" & vbcrlf
                result.WriteText "          <members>" & escape_xml(group_members) & "</members>" & vbcrlf
                result.WriteText "      </item>" & vbcrlf
                group_members = ""
            on error goto 0
        next
    end if
          CommentAdd your comment...