check /var/log/auth.log on the destination and check what user ossec is trying to use ... you should see auth failures ossec runs as a different user account so you will need to ensure that that user is accepted on the destination. I'm not sure about being able to specify the account ... someone else might have that answer
/nick On Fri, Dec 9, 2011 at 1:44 PM, Pedro Ramos <[email protected]> wrote: > It must be my public key setup. I've copied over the key into > /home/username/.ssh/authorized_keys on the system I am trying to connect > to. The error I see in the OSSEC.log is: > > "ossec-agentlessd: INFO: ssh_integrity_check_linux: username@host: > Public key authentication failed to host: username@host" > > My ossec.config file is the same as before except replacing the conents of > <host> with username@host. >
