On Tue, Dec 3, 2013 at 12:20 PM, fragmeat <[email protected]> wrote: > - All ossec users are created correctly. Ossec seems to work OK (ossec.log > on agent looks normal; agent reports back to server; output by > <ossec-control status> on agent looks normal; output by <agent_control> on > server looks normal.) > - Sorry for not being on cue: where would I find the plist associated with > ossec? >
I'm sorry, I don't own a Mac, and I was probably way off with that assumption as well. A more likely thing to look at would be to look at the way dscl may be used in the installation scripts (src/init/osx105-addusers.sh maybe). I think one of those is failing, so finding out which one will help solve the issue. > Thx! > > Markus > > Am Sonntag, 1. Dezember 2013 12:41:54 UTC+1 schrieb fragmeat: >> >> Hello! >> >> installation of an ossec agent on an ancient mac with OSX 10.6.8 and Xcode >> 3.2.6 returned the following output at the end of the install procedure: >> >> <<<<<<<<<<< >> <dscl_cmd> DS Error: -14136 (eDSRecordNotFound) >> <dscl_cmd> DS Error: -14136 (eDSRecordNotFound) >> <dscl_cmd> DS Error: -14136 (eDSRecordNotFound) >> >> >> - System is Darwin. >> - Init script modified to start OSSEC HIDS during boot. >> >> - Configuration finished properly. >> >>>>>>>>>>>> >> >> According to output of agent_control, rootcheck_control and >> syscheck_control the ossec agent seems to work fine. >> >> Any ideas? >> >> Thx! >> >> Markus > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
