Great. Thanks. I’ll give it a whirl…
Chris Hughes (m) (240)460-7283 From: [email protected] [mailto:[email protected]] On Behalf Of James M. Pulver Sent: Tuesday, March 25, 2014 2:18 PM To: [email protected] Subject: RE: [ossec-list] Auto-register windows clients Well, not exactly. The bash script probably shouldn’t need modification except to be put in the correct directory, and enable it via sudo for the proper user account in the autoit script. You need an existing example file so I just put it there – I believe specified in the autoit script. Then the autoit script, along with plink – compiled into the autoit script – will run the bash script when run on a windows computer. This autoit script is what needs to be modified for your environment, specifically user and password to feed into plink for ssh connections to the OSSEC server… Then compile and run .exe on your desired clients… -- James Pulver CLASSE Computer Group Cornell University From: [email protected] [mailto:[email protected]] On Behalf Of Chris Hughes Sent: Tuesday, March 25, 2014 1:56 PM To: [email protected] Subject: RE: [ossec-list] Auto-register windows clients Thanks James. So if I understand correctly, Run the bash script on the OSSEC serve after modifying it to my environment, and then run AutoIT against the .au3 script on the workstation? Chris Hughes (m) (240)460-7283 From: [email protected] [mailto:[email protected]] On Behalf Of James M. Pulver Sent: Tuesday, March 25, 2014 10:44 AM To: [email protected] Subject: RE: [ossec-list] Auto-register windows clients You will indeed need the bash script as it has to run on the Linux side with my AutoIT script for it to work. This should help out. I don’t mass generate keys though. This generates them on demand. Read the comments in the autoit script for details. -- James Pulver CLASSE Computer Group Cornell University From: [email protected] [mailto:[email protected]] On Behalf Of Chris Hughes Sent: Tuesday, March 25, 2014 9:37 AM To: [email protected] Subject: RE: [ossec-list] Auto-register windows clients I looked and found a post where you posted Auto-IT as an attachment but the attachment no longer was there. The environment is almost exclusively Windows so I wont need the bash script. Can you post Auto-IT? My scripting is pretty crusty but I can usually figure them out. Chris Hughes (m) (240)460-7283 From: [email protected] [mailto:[email protected]] On Behalf Of James M. Pulver Sent: Tuesday, March 25, 2014 8:05 AM To: [email protected] Subject: RE: [ossec-list] Auto-register windows clients I think if you search the list you should find some options. I know I posted generic versions of the two scripts I use to do this (one is AutoIT on Windows, the other is on Linux in bash if I recall correctly and it needs a sudo permission)… -- James Pulver CLASSE Computer Group Cornell University From: [email protected] [mailto:[email protected]] On Behalf Of C Hughes Sent: Monday, March 24, 2014 8:33 PM To: [email protected] Subject: [ossec-list] Auto-register windows clients I've been searching for days and can't find how to do this. I tried running "/var/ossec/bin/ossec-authd -p 1515 >/dev/null 2>&1 &" and installing the win32 client on XP systems but that doesn't work. Other solutions for mass deployment I've found are above my Linux pay grade. I have the server working on Ubuntu Server and can manually register clients so I'm confident my install is ok. Anyone out there able to lend a hand? Thanks... -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
