On Fri, 8 Oct 2010 00:33:24 -0700 (PDT), CYBORG <[email protected]> wrote: > What tool do you used for generate client.keys file in C:\Program Files > \ossec-agent ? > > i have a key (generated by ossec server) > MDQ4IHNiMSAxMC4xODAuNzQuNCBlNTcyMDFkMTkzMjc4ZThlNTlhOWY4OTJiOGUzZTliMmY3NDM2YzIzNmNjNjEyOTlkOGQyNjYxZmY2NDBlYmQ
That is the BASE64 representation of the agent ID, agent name, IP and key. Your key has been compromised by posting it here. Time to change it! > If i used C:\Program Files\ossec-agent\manage_agents tool to import > this key - Its WORK, but file client.keys changed to > 041 xx5-xxx 10.180.74.3 > e57201d193278e8e59a9f892b8e3e9b2f7436c236cc61299d8d2661ff640ebd1 To use it directly in client.keys on the agent, just use the exact same line as is on the manager client.keys. > Question: how can i write a AGENT_KEY to a multiply agents in windows > domain without C:\Program Files\ossec-agent\manage_agents tool This is a simple matter of remotely editing files and restarting the OSSEC service. There should be a couple of solutions to help automate that for 2WoO. -- [I] Immutable Security Information Security, Privacy and Personal Liberty http://www.immutablesecurity.com
