Skip to end of banner
Go to start of banner

Release Notes for Open-AudIT v3.3.0

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Next »








VersionTypeCollectionDescription
EnterpriseImprovementBaselinesMove baselines definition into the database. Results are still stored as JSON files on disk due to database size.
EnterpriseImprovementBaselinesMake Baselines templates look as per other endpoint templates.
CommunityImprovementGroupsAllow for 'normal' /groups/<id>?action=execute URL as per other endpoints.
ProfessionalImprovementDatabaseNew menu option. Admin → Database → Schema Compare. Checks the schema of the in-use database against the definition supplied as a file and highlights differences.
ProfessionalImprovementAllAdd the name of the object to the title bar if we're viewing an execute or read template.
CloudImprovementTasksImplement working tasks for all customers for Cloud.
ProfessionalImprovementDiscoveriesChange the Export Logs icon to avoid a clash with the Export icon implemented for all collections::read templates.
ProfessionalImprovementDiscoveriesNew menu items under Discoveries.
ProfessionalImprovementDevicesNew menu items under Devices..
ProfessionalImprovementDevicesProvide a global default columns retrieval list and default columns show list. Default columns show can be overwritten per user. Allow on the /devices page to show/hide columns and save as the users default columns list.
ProfessionalImprovementDevicesRefine the devices collection template to hide/show the sub_resource items. Refine the sub_resource templates and add another for viewing a single sub_resource entry.
ProfessionalImprovementDevicesAdd task to the device display left side menu.
EnterpriseImprovementIntegrationsAdd Last Run to Integrations Collection template.
CommunityImprovementDiscoveriesAdd sudo password on credentials templates. Use new 'sudo_password' when using ssh_key credentials, if populated. Revise SSH timeouts when using sudo. The old "password" field, on a credentials entry for an SSH Key, was used both for the key itself (if encrypted) and also for the sudo password. This didn't work when they we different (ie, most of the time). If the SSH Key had no password, it worked as expected.
ProfessionalImprovementConfigurationRemove oae_password from being used. Set password to '', effectively barring logon (new installs only).
CommunityImprovementDevicesOnly allow JPG, PNG and SVG files to be uploaded as device images.
ProfessionalBugDevicesFix displayed text for Audit My PC link on Linux.
CommunityImprovementLDAP ServersAdd new attribute for ldap_servers - use_auth.
ProfessionalImprovementDiscoveriesMinor refinements to the discoveries_read template.
ProfessionalImprovementDiscoveriesAdd open|filtered to the discovery scan options with a default of 'y'. This change means Ultrafast, Superfast and Fast discovery scan options now have changed and will detect a device if an open|filtered response is returned. Previously we used the "filtered" column to check for open|filtered. This change aligns the discovery scan options with Nmap return strings.
ProfessionalBugRacksSystem detail button on rack visualization does not work in Firefox.
ProfessionalImprovementDiscoveriesAdd time for Scanning for Nmap response to discoveries::read template.
CommunityImprovementDiscoveriesRemove network address, add open|filtered to discoveries create and read templates.
CommunityImprovementDevicesImplement code to delete a device from the database when config item set and status changed to deleted.
CommunityImprovementDevicesAdd nmis_customer to integrations (and database).
ProfessionalImprovementDevicesUn-managed Devices Menu Entry and Edit.
CommunityImprovementDevicesRetrieve more linux user information (home, shell, ssh Keys).
CommunityImprovementAllA large amount of code formatting to adhere to the include code sniffer (see /other/PHPCS_Coding_Standard).
CommunityImprovementDevicesAdd deprecation notice to devices::collection template for running a Query based on a Group.
CommunityImprovementConfigurationAllow filters in /configuration (particularly for configuration.name), mostly for the API.
ProfessionalImprovementWidgetsAdd server.edition to Server Types summary.
CommunityImprovementDevicesRemove the 'default' route (for 0.0.0.0) as it already shows in 'ip r' and it also may have more than one for 0.0.0.0 with different weights, think VPN.
CommunityImprovementDevicesAdd Seagate identifier for Manufacturer to linux disks.
CommunityImprovementDiscoveriesDon't use the timeout (2m), hard set to 10 seconds for SSH login.
CommunityImprovementAllSort the meta->data order.
CommunityImprovementDiscoveriesMac Models added.
CommunityImprovementDiscoveriesRevise SSH timeouts when using sudo. Only use configured limit for the audit script (otherwise a simple delete file has to timeout). Timeout was defaulting to 10mins, regardless of setting. I had to explicitly set this for each ssh->read command. Discovery using this went from 365 seconds to 165 seconds for a single host.
CommunityImprovementDiscoveriesUse self-delete on SSH audit scripts running via discovery.
CommunityImprovementUsersAccept username and password via request headers in m_logon.
CommunityImprovementConfigurationCode added to check_defaults to set default_network_address based on determined server IP, if not already set by the user.
CommunityImprovementAllMassive (code) shake up of how we do Collections (and a bit of READ, too). No more m_collections::collection or My_Model::collection_sql used. Each collection now responsible for it's own items. Every model has a collection function that takes either a user or response. We can now call each for either a straight list of items the user can see or a full response with column list, exclusions, et al as per the API.
CommunityImprovementUsersRemove nmis user from default user list.
CommunityBugDiscoveriesUse correct argument order in explode function for UUID retrieval via SSH.
CommunityImprovementDiscoveriesNew discovery routine using the queue. We now have a "discovery queue". Each IP is scanned NOT by discover_subnet.vbs||sh, now it's directly in PHP. We have effectively deprecated the discover_subnet scripts as at 3.3.0. We create a new entry per IP in a queue and loop over those, with a default number of spawned processes set to 20 (configurable). Discovery times have again sped up by a large amount and if your network and Open-AudIT server allow it, you can increase the default queue limit and gain even more.
CommunityBugDiscoveriesFor service items, include the 'port' in the match. We were matching on name + type only, which failed when we have multiple websites, same names, different ports (80 + 443).
CommunityImprovementDiscoveriesRemove 'manufacturer' from discover_subnet.sh as we don't use it and when it contains an ampersand, it seems to fail validations - even if we enclose it in CDATA.
CommunityImprovementDevicesAutomatically filter any devices without oae_manage = 'y' when requesting from Enterprise.
CommunityBugDiscoveriesFix bug in audit_linux.sh relating to Docker machine detection (thanks David).
CommunityImprovementDiscoveriesAdd config option called match_ip_no_data. If we discover a device and that IP is already in the database AND we have no audit data about that device, assuming it is the same device, do not create another (usually duplicate) device.















  • No labels