1

Hi everyone. I’ve begun trying to have our Mac’s audited so they’ll show up in the Spiceworks inventory but it’s just not happening. Spiceworks reports being able to see the device and that it’s likely a Mac, but it has no details. Scanning has been happening for hours so it should be done by now. Here are some details to help you help me. 8)

A service account was created for the Mac’s to use on our AD network for the auditing. The username and password have been entered into Spiceworks to automate the auditing (in Stored Passwords >> SSH). This same account has been created on the Mac’s (same username and password as in AD) as a local admin account. The firewall on the Mac’s is on but is allowing incoming connections for SSH and Remote Management.

Basically, I’ve followed the step-by-step guide(s) found on Spiceworks.com but these darn Mac’s aren’t being audited completely/successfully.

Any ideas?

1 Spice up
2

when the macs are failing have you tested the credentials - it will move to the right if successful and the left if it fails.

Also try the mac root account and see if you get a different result, I’m not sure that local administrator accounts on the mac is enough, I believe you need to use root level access.

3

Hi Rod-IT. Thanks for the reply. I’m not sure what you mean. I have a network inventory that runs so I’m not specifically trying to audit these Mac’s.

With that in mind, the very last thing I tried (a few hours ago) was to create a “network” in the “Your Network” section of the Network Scan page (click Settings >> Network Scan) that had these 2 Mac’s IP addresses listed in there specifically.

Not quite sure about the root user idea. One of my guys tried that already and actually couldn’t find the root account or something like that? How do you enable the root account?

4

if you have them separately, and you scan one - what happens

5

I get this, if this is what you’re looking for. I’ve removed the username and password listed there. Those fields aren’t blank, but they always show my own AD credentials.

spiceworks_error1.JPG
spiceworks_error1.JPG800×901 101 KB
6

Can you manually SSH from the Spiceworks Server to the Mac using the credentials you supplied?

7

Its trying SSH - the account shown below

root.PNG
root.PNG718×30 27.8 KB
Is that from a switch or something else?
8

This user ssh-root-fb8, is failing to authenticate.

Remove any dashes (-) macs are very fussy, stick to regular letters if this is the right account

9

Jackie, we can SSH into the Mac’s no problem using the local administrator account we created. We tried this via Putty to make sure it was working.

Rod-IT, if you’re referring to this part of the screen:

spiceworks_error2.JPG

but with the username and password fields filled I’m not sure where it’s pulling the username and password from. What ends up showing up in there every time is my Spiceworks login username and password, so I guess it’s pulling it from Spiceworks.

10

"Rod-IT Aug 31, 2015 at 2:03 PM

This user ssh-root-fb8, is failing to authenticate.Remove any dashes (-) macs are very fussy, stick to regular letters if this is the right account

This user ssh-root-fb8, is failing to authenticate.

Remove any dashes (-) macs are very fussy, stick to regular letters if this is the right account"

Rod-IT, is that root user standard on all new Mac’s? How do I find it/enable it?

11

No, the account I shown you is what your SW is trying to use for SSH authentication - someone has put that in somewhere. It wont have guessed it as a username.

in the SSH fields, populate it with your Mac admin details. It should then scan.

12

I’m confused. In Spiceworks we’ve only created 3 SSH logins/passwords for scanning and none of them have that as the username. Where was it that you saw that? I don’t see it anywhere. :frowning:

We do have an account in the SSH settings with the username root but it’s not meant for the Mac’s to use. Is it possible that the Mac’s are trying to use it? Or does Spiceworks go through each of the 3 accounts until it finds one that works?

13

It will try the 3 until one works.

Look at your second screenshot - you posted it.

I got the username from your images

14

Sorry, middle of your image - in red

15

Oh I see that now. Weird. Where is it finding that username to try and use it? I am 100% certain (looked at it multiple times today) that we only have 3 SSH accounts in the Spiceworks server and none of them have that as the username.

16

No idea, but it’s there.

Where it says, tell us how to fix it, put in your mac administrator account and password - not domain\ just administrator (or whatever you used) and your password, no domain.

17

Rod-IT, I just tried that and on both Mac’s it errors out with “Nope. Didn’t work.” Yet if I use the same username and password combo in Putty to SSH into these Mac’s the credentials work. Weird?

18

try it from the same server that SW is installed on - rule out an IP filter on the macs

19

Okay I tried that and the same message - “Nope. Didn’t work.”

20

Sorry, perhaps you misunderstood.

Not from within SW, just on the server, using putty or similar, like you did from your own machine.