Linux and Unix scanning requirements

To scan a Linux or Unix computer without an agent, certain requirements must be met. Ideally, an agentless scan of a Linux or Unix computer is performed through SSH. Though other protocols enabled on the computer, like SNMP, may provide some information as well, SSH will return the most detailed data. In order for Lansweeper to scan a Linux or Unix computer, you need to ensure that SSH is enabled on the computer. We recommend using OpenSSH.

The account you use to access SSH must be able to run the uname command. Depending on your Linux distribution, Lansweeper will also run a selection of the following commands, though (unlike the uname command) these commands are not strictly required: arp, bdf, df, dmidecode, dpkg, echo, equery, grep, hal-find-by-property, hal-get-property, ifconfig, lanscan, lslpp, lspci, machinfo, netstat, oslevel, pciconf, pkg_info, pkginfo, prtconf, prtdiag, rpm, smbios, sudo, swlist, sysctl, type, uptime, xl. The output of these commands must be in English, as other languages may not be correctly parsed.

Full root access is not necessary, but using an account with sudo rights is recommended. Sudo is only required to run dmidecode and if sudo is not installed, Lansweeper will try to run dmidecode without sudo. If dmidecode cannot be executed for some reason, some hardware information will not be scanned, but the rest of the scanning process will still be executed.

To configure a Linux computer for scanning, do the following:

  1. Verify whether OpenSSH is installed on the computer. Use a graphical package manager or enter one of the commands below in the console.
    - Debian, Linux Mint, Ubuntu:
    dpkg -s openssh
    - Fedora, Mageia, Red Hat:
    rpm -q openssh
    - Gentoo, Sabayon:
    equery list openssh
  2. Install the OpenSSH server, if it's not already installed. Use a graphical package manager or enter one of the commands below in the console.
    - Debian, Linux Mint, Ubuntu:
    sudo apt-get install openssh-server
    - Fedora, Red Hat:
    sudo yum install openssh
    - Gentoo:
    emerge --ask --changed-use net-misc/openssh
    - Mageia:
    sudo urpmi openssh
    - Sabayon:
    sudo equo install openssh
  3. Reboot the computer.
  4. To run SSH automatically when the computer starts, enter one of the commands below in the console.
    - Debian, Linux Mint, Ubuntu:
    sudo update-rc.d ssh defaults
    - Fedora, Mageia, Red Hat:
    sudo chkconfig sshd on
    - Gentoo, Sabayon:
    rc-update add sshd default
  5. To run SSH once, enter the command below in the console. The SSH service will be started once and then shut down when the machine reboots.
    sudo /etc/init.d/sshd start
  6. Verify whether SSH is running by entering the command below in the console. If there's output, SSH is running; if there's no output, SSH is not running.
    ps -e | grep sshd
  7. You now meet the requirements for agentless Linux scanning. Start scanning the computer by following the instructions in this knowledge base article.
     From Lansweeper 6.0 onward, you can use both username/password and certificate-based authentication to connect to SSH on a Linux computer. Older Lansweeper releases only support username/password authentication.

Related Articles