offlinesec-connector 0.0.12

Offline Security Connector

Offline Security Connector

The Offline Security Connector is a package for Offline Security Client which allows direct connection to SAP systems via RFC protocol (PyRFC library). It collects all needed data for the Offline Security reports.

Advantages

• You don't need to perform manual actions in SAP anymore
• It supports password authentication, SNC and SSO configurations

Table of contents

• Installation
• Quick Start
• Use Cases

Installation

Python installation

Install the last version of Python 3.x from here
We support only Python 3.x!

PyRFC installation

Please refer to the pyrfc doc Do not forget to download SAP NWRFC SDK from sap.com.

Published version installation (recommended)

pip3 install offlinesec-connector

or

python3 -m pip install offlinesec-connector

Check the installation script output. if you see the following message: WARNING: The scripts offlinesec_connector and offlinesec_conn_settings are installed in '/Users//Library/Python/3.8/bin' which is not on PATH.

Then add Python folder to the PATH variable:

export PATH="$PATH:/Users/<username>/Library/Python/3.8/bin"

Upgrade to the latest published version

pip3 install --upgrade offlinesec-connector

Note: It's recommended to use the last available version each time

Check what version is installed right now on your laptop

pip3 show offlinesec-connector

Quick Start

1. Set Connection settings with offlinesec_conn_settings

offlinesec_conn_settings -f settings.yaml

where settings.yaml file - a file with connection settings to SAP. Please refer to the doc.

2. Run the connector

offlinesec_connector -c DEV

where DEV - a connection name from the settings file Please refer to the doc

offlinesec_connector -g 'g:productions'

where 'g:productions' - a groupname from the settings file

Use Cases

Missed SAP Security Notes (Unpatched SAP security vulnerabilities)

offlinesec_connector -c DEV

Please refer to the doc

What access we need:

• S_TABU_NAM:ACTVT=03 S_TABU_NAM:TABLE=CWBNTCUST, PATCHHIST
• S_RFC:ACTVT=16 S_RFC:RFC_TYPE=FUGR S_RFC:RFC_NAME=SDTX, OCS_CRM

To run the following FMs:

• OCS_GET_INSTALLED_COMPS
• RFC_READ_TABLE

and read the following tables:

• CWBNTCUST
• PATCHHIST

Uninstall

python3 -m pip uninstall offlinesec-connector