I believe that scanning with credentials on windows generally does not work
over ssh, but rather the standard windows login mechanisms, such as IPC$.
You will have to put in the credentials into the SMB username and password
blanks provided in the credential section. You will also have to use a user
who can mount IPC$
I would suggest taking a look at
http://www.tenablesecurity.com/images/pdfs/blended_security_checks.pdf
http://www.nessus.org/documentation/nessus_credential_checks.pdf
On 11/21/06, Patrice.Arnal@alcatel.fr <Patrice.Arnal@alcatel.fr> wrote:
Hello
I set up SSH access on all servers ( Unix & Wintel ) in order to run
internals checks ( patches ... ) on all servers.
The account used is "nessus" and the login is done through keys exchange (
no password )
This works well for netstat ( local port scanner) but the plugin 10400
fails.
A quick glance on the code seemed to indicate that the plugin is trying to
mount IPC$ by providing "login/password"
which obviously fail....
Thank you for the help
Cordialement / Mit freundlichen Grüßen / Best regards,
_____________________________________________
Patrice Arnal
ISS - DataCenter – E&S
Alcatel ICT Services
1rte Dr A.Schweitzer - 67408 - ILLKIRCH - FRANCE
Phone : +33 (0) 3 90 67 74 22 / 2187 74 22
Fax : +33 (0) 3 90 67 72 07
Mobile: +33 (0) 6 06 07 67 68 08
Mailto: patrice.arnal@alcatel.fr
_____________________________________________
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
--
Doug Nordwall
Unix, Network, and Security Administrator
Noise proves nothing. Often a hen who has merely laid an egg cackles as if
she laid an asteroid. -- Mark Twain
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus
