OAv2 beta3 released

Go grab it.

To upgrade your database (for an existing beta1 or beta2 install), copy the OAv2 files over the old ones, then fire up OAv2 and go to Help -> about (as an Admin).

Then click the red upgrade text. Done.

Make sure you use the new audit script, too.

FWIW - I would backup your database before doing this and also copy your original OAv2 files somewhere else. That way, if the worst happens, you can always revert back...

Please submit some statistics (Help -> Statistics) so I have some idea of how many people are using OAv2 (and how many systems they are auditing with it). This submission cannot be linked back to your organisation.

Also - I am off camping with the family from tomorrow night (Tue, Brisbane time). I will have limited internet access and no access to debug issue's. I will check the forums, but fixes won't be forthcoming until next week. Apologies if this causes an inconvenience.

https://launchpad.net/oav2/trunk/beta3

OAv2 beta 1.1 released

Based on some feedback (ie, bugs), I've released beta 1.1.
Make sure you grab 1.1 and not beta 1 from https://launchpad.net/oav2/trunk/beta1.

42 downloads in 24 hours - and feedback/testing submitted.
Thanks to all who take the time to help.

Make sure you visit the forms at
http://www.open-audit.org/phpBB3/viewforum.php?f=20

Beta 1 of OAv2 released

Done, out, pushed, released... finally.

This is a bit of a warthog release - I haven't done anywhere near as much testing as I would have liked. Please report the bugs to the Open-AudIT.org forums.

Seeing as I have now classed this as "beta", I will (from now on) attempt to provide database schema upgrades as scripts. Eventually, I'd like to get an update system similar to Wordpress. Very easy for the user to do. Eventually.

What's new - well it's now available as an XAMPPLITE package. For the Windows users, download it, extract it to C:\ start the xampp-control.exe, start Apache and MySQL and you're done. You should be able to browse to the root of your machine in a browser and get the logon page.

There's also a "code only" release. for IIS, Linux, etc, etc users who just want the application.

Groups and Reports are now stored in OAv2/code_igniter/system/application/controllers/groups (and /reports) directories. Drop the XML definition in the directory and you can "activate" the group or report in the web interface. The other options (import, export, etc) still exist.

I've improved the audit script. SQL won't hang (on SQL Express, etc) auditing now. You can also supply credentials to the audit script for auditing system's not on your domain.

cscript audit_windows.vbs COMPUTERNAME strUser=USERNAME strPassword=PASSWORD

Nice and easy. You can also use the credentials in the "audit list" script. Just add them after the computer name (as above) and when it calls the "audit windows" script, all arguments are passed through.

I've cleaned up the theme-tango/tango-files directory. It's quite clean as far as the .css and .js files are concerned. JQuery has also been updated to the latest version.

Some big feature's since last time -
Creating an Organisation now creates a corresponding Group.

If you have "edit" rights, and Report that includes a System ID will show an extra column. You can select multiple systems and edit their details together. Like when you acknowledge an Alert - only now for all the manually settable item's on a System, itself. One example use would be viewing the Systems in an automatically created network (subnet) group. You could set ALL the owner fields to a particular entity. Very quick and easy, versus editing each system by individually.

I also mean to create an individual audit script when you create an Organisation. All it would do is also set the Org_ID tag in the script - therefore automatically assigning any system audited by that particular script to an Organisation and it's corresponding Group. That's very much on the list...

There are a few other improvements... download it and try them out !

https://launchpad.net/oav2/trunk/beta1

Alpha 7 is out

Printers and Monitors now audited.
Many bugs squashed.
Get it now !

http://launchpad.net/oav2/trunk/alpha7/+download/OAv2.zip

Update

Have fixed the reported Bugs in alpha 6.
Have been doing some streamlining / cleanup work on Groups.
Have added to the FAQ page, inside the application (help -> FAQ menu item) detailing how the columns work when displaying Groups and Reports.
Alpha 7 should be out soon with these updates.

OAv2 Alpha 6 released

Heaps of changes in this release.
I'll attempt to detail them in a subsequent post.
Please download it and report feedback to the Open-AudIT forums - LINK.
I have a few days off, so I plan to code, code, code. Any feedback / bugs can be corrected quick smart !).
You can find the download link on the right of this page.

Alpha 5 released

Fixed a few bugs.
Export a Group definition to XML and import.
SQL Database enumeration.

Update

No coding done over the weekend - we have visitors staying with us.
I should be able to get a release up pretty soon though.
I've had some feedback (from alpha 4) and have also managed to get SQL Server DBs enumerating / storing / reporting.

Alpha 4 released

I've created a release, even though the (internal OAv2) Change stuff isn't finished.
Grab it here -
http://launchpad.net/oav2/trunk/alpha4/+download/OAv2_alpha_4.zip

Too Long

Wow - it's been waaaaay too long between posts.
Here's what's been happening.
I spoke at SAGE-AU in Hobart. It went down OK.
I've been away a couple of times with a work course (3 days at a time).
We're in the middle of ripping out our kitchen. Nearly there with the new one.
The kids have been to 1001 birthday parties lately.
Real life is just too busy !!!

OK, having mounted my defense of excuses, where is the next release of OAv2 at ? I'm glad you asked.

I think all that's left to do for another release is to post the Change form to the DB. Really. That's it. I'll do my best to knock it off tonight - but the kitchen benchtops and plumbing are going in this afternoon - sigh...

I've completed migrating the "reports" into the DB. You can now define a report and it's display columns. You can export it as XML (and import it back) as well. Essentially, someone can come up with a nice report, export the XML and post it to the forums for others to use.

There has been much refactoring and code cleanup, too. Oh, and partition use graphs are in, too (along with trend lines). And exporting to CSV and XML works (along with Excel). If you want, you can always grab the code from Launchpad using Bazaar.

Alpha 3 available

Yep, you read right - it's available.
Go grab it and give it a thrashing.
All previous Bugs should have been addressed.

http://www.open-audit.org/OAv2_03.zip

Import / Export in OAv2

I have the import and export routines working for Devices, Locations and Organisations. Excel only at this stage.

One interesting aspect was the need to alter the network group creation routine. Think of a network device that you know about, but don't know specific IP details. IE - you know it's IP Address, but what about it's configured subnet ? What about it's MAC Address ? A lot of people will not know the details. So now network group creation has to account for IP Addresses in the system table - not just the sys_hw_networkcard_ip table. Interesting, but all good and working.

Any report type page (ie - a list of "All Devices") now has a shiny little button (an Excel icon). Click it and you can download & open the resulting Excel spreadsheet. At the moment it's a straight data dump, so things like column headings come direct from the DB. I will have to make another option that removes certain columns and alters the column headings (IE - man_ip_address would become IP Address, system_id would disappear altogether, etc). This would make two styles of output - a dump and a report. Will address this later on.

I think that's good enough for a release. Give me a few hours (when I get home from work) and I'll post again with release details.

Any help debugging would be appreciated.

Nearly ready for another release

What have I been doing on OAv2 ?
Well, for one thing, creating routines so you can import your devices / locations / organisations from a spreadsheet. Most places can easily conjure up a listing of relevant data - most often in a spreadsheet. The import routines for Locations and Organisations are complete, I just need to finish off Devices (which I have working in test code).

I also have nearly finished the routine to export any Report to Excel, PDF or CSV. Thanks PHPExcel !

I've also completed the Group Edit pages so they don't break auto-created Groups.

Give me a couple of days to finish up and another release will be available.

Update

Have created a couple of new reports in OAv2.
All reports are based on a Group of systems or optionally, all systems you are authorised to view, regardless of group:

• System Shares
• Orphaned Users

These now live alongside :

• Partiton Useage,
• Partiton Alert (partitions below %20 free space),
• Local Admins
• Audit Dates
• System Locations

I fixed a bug in the audit script that would not retrieve share permissions when there was a space in the Share Name.

I altered the audit script to retrieve the size of remote Shared Directories.

One thing to note is the increase of script execution time when retrieving the size of remote shared directories. I've seen it take 10 minutes (on a large file server - multiple terrabytes) to complete... I run it overnight, so it isn't an issue for me, but I may make it an optional thing to enable...

ToDo for OAv2

I think if I can get these done, I'll call it a 0.3 release...

• Fix the Alter Groups code (as per OAv2 release notes).
• Display all the "man_" fields for a system (as per OAv2 release notes). "man_" fields are meant to be manually updated data - stuff like physical location, etc, that cannot be derived from querying a system.
• Revise the menu structure.
• Fix the installed software SQL (as per OAv2 release notes).
• Create a form to manually add a system. You can do this currently by taking an audit result XML file and replacing the details for the manual system - but it's ugly, annoying and a hack.

Progress

I have already addressed a couple of issues with OAv2 Alpha 0.2.

It doesn't like PHP 5.3 - the short tags are ON in the code. Have replaced them. PHP 5.3 depreciates the "ereg" function(s) - I've replaced them with "preg_match" functions.

Look for Alpha 0.3 soon.

Alpha 0.2 released

A new public Aplha of OAv2 has been uploaded. We're getting there slowly - but damn real life keeps getting in the way !!!

You can grab the code here:
http://www.open-audit.org/OAv2_02.zip

Some release notes...

The "system display" page still looks a bit weird in Internet Explorer.
The headings are in blue (should be dark grey).
The background of the sections overflows vertically.

Best not to alter a Groups - (eg: rename a Group).
When you alter a Group, it is not catered for when importing a system and a duplicate group is created.
It thinks the Group no longer exists and creates a new one if need be (think network groups).
I need to fix this ASAP.

There have been a few database changes.
Best to create a new database and go from there.

Not all man_ type fields are displayed on the "system display" page - to do.

Under the "Queries" menu, you will only see two options now.
Choose Groups and from there click the Group Name to see the systems.
Once a Group is being viewed, "Reports" menu becomes available.
You can run a "Report" on all systems YOU can see (not just one specific Group), by replacing the Group_id in the URL (the last number) with a zero - 0.
If you can view the "All Devices" group, it's better (SQL wise) to use that option.

The "Installed Software" SQL need attention.
Running it across ~3,000 systems takes so long, I haven't seen it actually complete.
Need to revise the SQL.
The main problem is the counting of how many installs a particular piece of software is on.
Have removed that and it is OK, but we NEED that functionality.
To be addresses ASAP.

Created a couple of seperate scripts to audit your domain or a list of PCs.
They both take the PCs and run audit_windows.vbs against them.
Check the scripts for details.
NOTE - if submitting online, make sure to set the URL in audit_windows.vbs

OAv2 Alpha update

I have sent the Alpha to one of our Developers (Andy Hull).
Andy has sent some feedback, which we are working on.
I'll post the download link here, when I make a public upload (when I get home tonight).
** As promised - try this - http://www.open-audit.org/OAv2.zip

Things to bear in mind.
THIS IS ALPHA SOFTWARE.
IT WILL EAT ALL YOUR DATA.

Now that I've scared you...

• I would NOT recommend this for running in Production.
  
  
• Sure, you might audit a production system, but I wouldn't rely on this as a replacement for Open-AudIT right now. Feature wise, it's still a way behind.

• There is no install routine. You will need to know how to setup MySQL databases, et al. There IS a readme in the file detailing basic steps needed to do this. Please don't ask for help. If you cannot install this, then you shouldn't be playing with it !!! One of the things high on the todo list is an installer (both for Windows and Linux).

• Linux auditing probably wont work. I have spent most of my time on the Windows side of things. Linux auditing is on the list - and indeed there is a basic script in the download. I haven't even opened it for months though, so I'm guessing it wont upload into OAv2 correctly.

• SQL Server doesn't have a database creation script. Simply because the database schema still isn't finalised.
  

What does work ?

• Manual running of the audit script and inserting it into the web form. Running the audit script against a remote system. Running the audit script and auto uploading (via Explorer).

• Dynamic Groups. I haven't built the web forms for static groups yet.
  
• OAv2 users and Group permissions.
  
• Locations and assigning systems to them.
  
• Editing manual values in web forms.
  
• Creating / Editing / Deleting Users, Groups and Locations.

Check back here later for a download link (I'm such a tease :-) ).
** As promised - try this - http://www.open-audit.org/OAv2.zip

OAv2 Alpha is inbound

Well, I have today (Mon) and Wed off from work.
Am coding my butt off to get OAv2 into an Alpha state.
Have spent a couple of hours on it this morning, and I think be Wed night (at the latest), I will look to push the code to SVN.
Looking "good enough" at this stage.

As per my last post, the status on various items are...

* - Audit script runs on PCs and submits to database. DONE.
* - Users can be created and assigned rights to groups. DONE.
* - Groups can be created/edited/deleted. DONE.
* - Devices can be viewed with all submitted audit details. DONE.
* - Devices can have their "manual" fields edited. DONE.
* - "List" type pages (based on groups) complete DONE.

It's more about cleanup and release readiness than anything else now.

Apologies

Apologies for the lack of recent updates.
Unfortunately, not a great deal has happened lately.
Damn "real life" keeps getting in the way.
So, what HAVE I managed to do...

Well, I have a MSSQL Server compatible database script.
I am working on a bug in the Software audit processing routine.

For an Alpha, I'd like to get basic functionality complete. By basic functionality I mean:
* - Audit script runs on PCs and submits to database.
* - Users can be created and assigned rights to groups
* - Groups can be created/edited/deleted
* - Devices can be viewed with all submitted audit details
* - Devices can have their "manual" fields edited
* - "List" type pages (based on groups) complete
Most of these items are nearly complete (as in 90%). It is more a matter of "finishing them off".
Realistically, I think it would be (maybe) 30 hours work. Not sure there. Might be way off.

My main problem is having a "real" job and a young family (and a slight World of Warcraft addiction, forgive me).

I also have to go back through the models (in CodeIgniter) and check the functions work with MSSQL. I've had a few enquiries about MSSQL compatibility lately, and want to make sure it's all OK. I've also had people say they (think Govt Dept Managers), don't want to use OpenSource. Not PHP, Linux, Apache or MySQL. They would like it rewritten in DotNet and MSSQL. It's frustrating that people STILL have this attitude. I don't mind catering to database abstraction, but the actual code ??? Sure, I'll just re-write the complete application, because you have a completely misguided notion of what "secure" means... sigh. Apologies for the slight rant.

Anyway - what you all want to know (well, the two people who bother to read this) is "WHEN CAN WE HAVE THE CODE ?". All I can say is that's there's not that much left to do for an Alpha and I want it done as much as you do.