ovaldi returns an error result when using a non-exisiting qualifier (e.g., nodomain\username) for a Win-def:user_object\user entity. Specific to the user_test.
a. Report ‘does not exist’ when a non-exisiting qualifier is used in a user_object\user entity. This is a defect and we should most definitely update ovaldi.
Examples (current ovaldi behavior):
E1. Input: <user_object …="" <user="">nodomain\Admin</user></user_object>
SC Output: <object flag="error" …="" <oval-sc:message="" level="fatal">Unable to get all local groups for user: Guest. Windows Api NetUserGetLocalGroups failed with error: The domain 'nodomain' does not exist or could not be contacted.</oval-sc:message></object>
Produced using ovaldi-220.127.116.11-x64 on Windows 7 SP1
Log in to post a comment.