There was a patch in 2.7-beta that may meet your requirement. Please invoke 'ossec-authd' with ' -i' argument. It was designed to write the ossec-auth agent IP address in the server client.keys files (instead of ANY). Please test to see if it works for you and report back.
Thanks! On Tuesday, October 2, 2012 7:31:34 AM UTC-7, Michael Barrett wrote: > > > Is there a way to configure agent-auth to use the IP address of the agent > instead of *ANY*? > > > > [root@arbuckle bin]# /var/ossec/bin/agent-auth -m 144.122.190.48 -p 1515 > 2012/10/02 09:28:41 ossec-authd: INFO: Started (pid: 7472). > INFO: Connected to 144.122.190.48:1515 > INFO: Using agent name as: arbuckle > INFO: Send request to manager. Waiting for reply. > INFO: Received response with agent key > INFO: Valid key created. Finished. > INFO: Connection closed. > [root@arbuckle bin]# cat /var/ossec/etc/client.keys > 1025 arbuckle any 00c21c1d > *____________________________________________* > *Michael Barrett* <javascript:>* *| *Information Security Analyst - Lead*| > *Mortgage Guaranty Insurance Corporation* <http://www.mgic.com/> > 270 E. Kilbourn Ave. | Milwaukee, WI 53202 USA | ( 1.414.347.6271 | 7 > 1.888.601.4440 | * [email protected] > > This message is intended for use only by the person(s) addressed above and > may contain privileged and confidential information. Disclosure or use of > this message by any other person is strictly prohibited. If this message is > received in error, please notify the sender immediately and delete this > message. >
