OCSInventory.exe crashes when executing vbs plugin

[Gerold Gruber]

I tried to implement the Linux example plugin which lists the open ports on Windows.

The output looks fine to me when run manually, even if I run it under the "Local System" account, as the service runs.
(tested with psexec from sysinternals : "psexec -s cmd" and then "cscript /nologo openport.vbs")

But when the plugin is executed from OCSinventory.exe it failes.
The problem occurs on Win7SP1 X64 German, it does not occur on Win2003 x86 (32bit) or with Agent V1

[Gerold Gruber (gruber-citkomm)]

the crash apparently occurs when the line
 Set objWMI = GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\cimv2")
is executed

[Didier Liroulet (dliroulet)]

Fix commited, see revision 228

Will be included in 2.0.0.16

[Didier Liroulet (dliroulet)]

Hi,

Agent release 2.0.0.16 is available to test at address http://launchpad.net/ocsinventory-windows-agent/2.0/2.0rc3/+download/OCSNG-Windows-Agent-2.0.0.16.zip.

Is it working for you ?

Cheers

[Gerold Gruber (gruber-citkomm)]

Am 12.04.2011 17:27, schrieb Didier Liroulet:
> Hi,
Bonjour Didier,

>
> Agent release 2.0.0.16 is available to test at address
> http://launchpad.net/ocsinventory-windows-agent/2.0/2.0rc3/+download
> /OCSNG-Windows-Agent-2.0.0.16.zip.
>
> Is it working for you ?
yes, it works.

I still will have to find out, why the web interface now reports
(null), where empty strings should occur, but this is probably
a problem of the inventory server (which could be worked around
with ocsreports hacking ;-) )

We will have more testing during the next days on different
platforms, I will let you know the results.

A little problem I had with the download: our proxy's
virus scanner first prevented the download of the archive.
I append you the result of a virustotal.com checking.
Just to inform you, that others might experience such problems, too.
>
> Cheers
>
Best regards

Gerold
--
Abteilung Systembetrieb
Telefon: [phone]
Fax: [phone]
E-Mail: <email address hidden>
Internet: http://www.citkomm.de

Citkomm services GmbH*
KDVZ Citkomm (Kommunaler Zweckverband)
Griesenbraucker Str. 4
58640 Iserlohn
Telefon: [phone]
Fax: [phone]
E-Mail: <email address hidden>
* Sitz der Gesellschaft: Iserlohn
   Handelsregister: AG Iserlohn, HRB 26 86
   Geschäftsführer: Dr. Michael Neubauer,
   Hans Jürgen Friebe, Kerstin Pliquett

[Didier Liroulet (dliroulet)]

Hello Gerold,

Sometimes, virus scanner consider NSIS code as malware :( We encounter many false positive with McAfee, BitDefender and other virus scanner.

concerning the (null) string, could you please attach a screen cap ?

I can check that to see if it is not an agent bug...

Cheers

[Gerold Gruber (gruber-citkomm)]

Am 13.04.2011 23:47, schrieb Didier Liroulet:
> Hello Gerold,
Bonjour Didier,
>
sorry for the delay in my answer, but I was out of office during the
last days.

> Sometimes, virus scanner consider NSIS code as malware :( We encounter
> many false positive with McAfee, BitDefender and other virus scanner.
yes, no problem, I just wanted to inform you.
>
> concerning the (null) string, could you please attach a screen cap ?
find it appended.

>
>
> I can check that to see if it is not an agent bug...
But I suspect this to be a server problem

>
> Cheers
>
Best regards

Gerold
--
Abteilung Systembetrieb
Telefon: [phone]
Fax: [phone]
E-Mail: <email address hidden>
Internet: http://www.citkomm.de

Citkomm services GmbH*
KDVZ Citkomm (Kommunaler Zweckverband)
Griesenbraucker Str. 4
58640 Iserlohn
Telefon: [phone]
Fax: [phone]
E-Mail: <email address hidden>
* Sitz der Gesellschaft: Iserlohn
   Handelsregister: AG Iserlohn, HRB 26 86
   Geschäftsführer: Dr. Michael Neubauer,
   Hans Jürgen Friebe, Kerstin Pliquett

[Gerold Gruber (gruber-citkomm)]

Bonjour Didier,

I investigated the (null) problem again and now I assume it is really related with the client.
My openport.vbs gives:
</NETSTAT>
<NETSTAT>
<PROTO>udp6</PROTO>
<LOCALADDRESS>[fe80::dc67:10cb:3e1e:ab3%16]:61506</LOCALADDRESS>
<STATE></STATE>
<PID>1528/C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation</PID>
</NETSTAT>

so you see the <STATE></STATE> line with just no content

But if I run the ocsinventory.exe with /xml switch I get in the resulting XML file
        </NETSTAT>
        <NETSTAT>
            <PROTO>udp6</PROTO>
            <LOCALADDRESS>[fe80::dc67:10cb:3e1e:ab3%16]:61506</LOCALADDRESS>
            <STATE>(null)</STATE>
            <PID>1528/C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation</PID>
        </NETSTAT>

that is: there is the (null) string already included.

On the other hand the empty string in LISTEN is imported and reported in the server's GUI correctly when it comes
from a Linux client.

Should wo reopen this bug or create a new one?

Best regards

Gerold

[Didier Liroulet (dliroulet)]

Hello Gerold,

This is not the same as crashing agent with VBS. Could you please open a new one ?

Thanks by advance