Resolution
fact
NetIQ Vulnerability Manager 5.0
fact
NetIQ Vulnerability Manager 5.5
symptom
Cannot run a check created with the Custom Check Wizard.
symptom
symptom
I get an error when I try to run a custom Security Check.
symptom
Custom check with a nested OU Path as a parameter causes an error in Vulnerability Manager.
cause
fix
NetIQ Vulnerability Manager 5.0
fact
NetIQ Vulnerability Manager 5.5
symptom
Cannot run a check created with the Custom Check Wizard.
symptom
Error: 'Failed to get Windows_OU xxxxxx/xxxxxxx/xxxxx in DC=xxxxxxx, DC=xxxxxxxx. There is no such object on the server'
symptom
I get an error when I try to run a custom Security Check.
symptom
Custom check with a nested OU Path as a parameter causes an error in Vulnerability Manager.
cause
A bug in the Custom Check Wizard causes this error. When you enter a nested organizational unit (OU) path (OU1/OU2/OU3), the wizard sees it as a single OU name instead of a nested path containing three OU names and replaces it with a default OU string.
fix
To fix this problem:
- In the VM Console, navigate to NetIQ Vulnerability Manager > Security Knowledge > Security Checks > My Checks and select the check that causes the error.
- On the Actions menu, click Export Security Check. Save the check to a location where you can find it easily.
- In Windows Explorer, browse to the location where you saved the check. Right-click on the check file and select Open With. Choose any text editor (for example, WordPad, Notepad, or ConTEXT) to open the file.
- Search for the following string in your check file:
Windows_OU=%{ORGANIZATIONAL UNIT NAME}
. - Attach the other OUs in your nested OU path at the end of the existing OU string, with a '
/
' between each OU string. See the example below:
OU Path:Departments/Canada/Users
Original OU String:Windows_OU=%{ORGANIZATIONAL UNIT NAME}
Modified OU String:Windows_OU=Departments/Windows_OU=Canada/Windows_OU=Users
- Save your changes to the check file.
- Go back to the VM console and navigate to NetIQ Vulnerability Manager > Security Knowledge > Security Checks > My Checks. Find the check that you exported in Step 2.
- On the Actions menu, click Delete Security Check. You need to delete the original version of the exported check in order to be able to import the modified version.
- Click on My Checks in the Tree Pane and then click Import Security Check on the Actions menu.
- Browse to the location where you saved the check in Step 2. Select the check and click Open.
- Re-run the modified check.
Additional Information
Formerly known as NETIQKB50365