On Tue, Feb 18, 2014 at 2:29 AM, David Montgomery <[email protected]> wrote: > > > I have server installed and one agent. I am on Ubuntu 12.04 > > I have agent and server started. > > ports 1515 and 1514 are open > on the server ran /var/ossec/bin/ossec-authd -p 1515 >/dev/null 2>&1 & and > have sskmanager keys installed. web ui is working as well. just no agents > > on the agent I ran the below..it just hangs...wow > > root@do-zookeeper-sg-development-20140217104340:/var/ossec/bin# > /var/ossec/bin/agent-auth -m 128.199.xxx.xxx -p 1515 -A > do-zookeeper-sg-development-20140217104340 > 2014/02/18 07:18:53 ossec-authd: INFO: Started (pid: 26588). > > > How do I resolve > > once it worked...after many tries.... > > 2014/02/18 04:53:37 ossec-authd: INFO: Started (pid: 25970). > INFO: Connected to 128.199.236.231:1515 > INFO: Using agent name as: do-zookeeper-sg-development-20140217104340 > INFO: Send request to manager. Waiting for reply. > INFO: Received response with agent key > INFO: Valid key created. Finished. > INFO: Connection closed. > > > Not no reustls are in the UI. I stopped server and the agent and remove the > agent from the server. and and rean the blow again > root@do-zookeeper-sg-development-20140217104340:/var/ossec/bin# > /var/ossec/bin/agent-auth -m 128.199.xxx.xxx -p 1515 -A > do-zookeeper-sg-development-20140217104340 > 2014/02/18 07:18:53 ossec-authd: INFO: Started (pid: 26588). > > I can telent into the server from the agent > root@do-zookeeper-sg-development-20140217104340:/var/ossec/bin# telnet > 128.199.xxx.xxx 1515 > Trying 128.199.xxx.xxx... > Connected to 128.199.xxx.xxx. > Escape character is '^]'. >
After the key was generated and installed, you should restart he OSSEC processes on the OSSEC server/manager and the OSSEC agent. I think you're confusing using authd with the agent trying to connect for general usage. They're not the same thing. authd only installs an authentication key on the agent and server allowing the agent to eventually connect. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/groups/opt_out. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
