Appendix: Authentication Status

The following appendices provide additional information about authentication status. These appendices only appear when viewing scan results in the Scan Results report when the scan had authentication enabled. Only IPs defined in authentication records are included in these lists. (Note that information about Oracle Listener authentication status is not displayed in the Appendix.)

Authentication Failed

This appendix lists hosts for which authentication failed. Each authentication type is listed separately.

Verify that login credentials specified in authentication records are valid for the target hosts. For Windows authentication at the domain level, verify that the host is a member of the specified domain. For Unix authentication using private keys, verify that the host contains corresponding public keys.

The following Information Gathered QIDs appear in the Detailed Results section of your scan report when authentication fails on a host. Review the Results section for each QID in your report for additional troubleshooting information like the authentication record used.

      QID 105015 Windows Authentication Failed

      QID 105053 Unix Authentication Failed

      QID 105193 Oracle Authentication Failed

      QID 105329 Oracle Listener Authentication Failed

      QID 105192 SNMP Authentication Failed

Several additional vulnerability checks may be returned in scan results that are useful for verifying authentication and troubleshooting the scanning engine's access to target hosts. See Windows Authentication QIDs for a list of QIDs that provide information on Windows authentication status and registry and file access.  

Authentication Success

This appendix lists hosts for which authentication was successful. Each authentication type is listed separately.

The following Information Gathered QIDs appear in the Detailed Results section of your scan report when authentication is successful on a host. Review the Results section for each QID for additional information like the login credentials that were used to authenticate.

      QID 70028 Windows Authentication Method

      QID 38307 Unix Authentication Method

      QID 19129 Oracle Authentication Method

      QID 19233 Oracle Listener Authentication Method

      QID 78049 SNMP Authentication Method

Insufficient Privileges for Data Collection

Note: This appendix only appears in compliance scan reports.

This appendix lists hosts for which authentication was successful but the login account had insufficient privileges. No posture evaluation could be performed on the host. Make sure the user account provided in the authentication record meets the minimum account requirements. Read Authentication to Hosts for more information.