About williamcclark

williamcclark

We recently added a TOS to our deployment. We have smart card auth enabled as well. When both are enabled at the same time and we select "OK" to agree to the terms nothing happens; prior to getting to the TOS screen we have already authenticated using the smart card. If we disable smart card auth and just allow UN/PW sign in we are able to accept the terms and continue on our merry way. If we disable the TOS and just have smart card auth enabled we are allowed to continue. What is (or is not) happening to where we can't have both enabled simultaneously.

williamcclark · ‎05-08-2024

I was able to check _internal and found "SSLError(MaxRetryError("HTTPSConnectionPool(host='redacted.host.com', port=XXX): Max retries exceeded with url: /rest/token (Caused by SSLError(SSLError(1, '[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1106)')))")). I have verify SSL set to false in the tenable_consts.py file so I am not sure if that has bearing ...*update* it does not still getting the same error. Any ideas?

williamcclark · ‎05-07-2024

Hi, I just installed the TA-tenable add-on and was going to configure it; however, when I get to the account configuration it does not matter what account type I use, I always get "Error in processing the request". Has anyone seen this before? If so, what is the fix?

williamcclark · ‎03-27-2024

Sorry for the late reply... Just started back working on this. For anyone who is curious, the answer was the port we were using had less attributes.

williamcclark · ‎01-22-2024

Name does return a value, as does every other attribute you listed. How is name not valid? Isn't it just pulling from properties in AD?

williamcclark · ‎01-22-2024

Hi @tscroggins I was using the search app to run | ldapsearch search="(&(objectClass=user))" attrs=name, accountExpires accountExpires is the attribute causing the aforementioned error. I know the property exists because I am able to call it via Get-ADUser.

williamcclark · ‎01-19-2024

Can someone explain to me where the attrs argument pulls its attributes from? Originally I thought it was essentially the "-Properties" flag from Get-ADuser and I would be able to use those properties but whenever I try it says "External search command 'ldapsearch' returned error code 1. Script output = "error_message=Invalid attribute types in attrs list: PasswordExpirationDate "." Where is the attrs list? How can I define more attrs?

Posts	7
Solutions	1
Karma Given	0
Karma Received	0
Member Since	‎01-19-2024

Online Status	Offline
Date Last Visited	yesterday

Unable to accept Terms of Service and continue to ...

Unable to add account to Tenable add-on

Splunk LDAP search add on: Ldap attrs config

Unable to accept Terms of Service and continue to ...

Re: Unable to add account to Tenable add-on

Unable to add account to Tenable add-on

Re: Splunk LDAP search add on: Ldap attrs config

Re: Splunk LDAP search add on: Ldap attrs config

Re: Splunk LDAP search add on: Ldap attrs config

Splunk LDAP search add on: Ldap attrs config