On Mon, Dec 1, 2014 at 9:54 AM, Philipp Hoferichter <[email protected]> wrote: > Hi, > > i have changed: > USER and Group variable values in: > ossec-hids-2.8.1/src/InstallAgent.sh and InstallServer.sh > > and in ".../src/headers" following vars: > #define USER > #define GROUPGLOBAL >
Were the users and group created successfully? > > > On Monday, December 1, 2014 3:39:42 PM UTC+1, dan (ddpbsd) wrote: >> >> On Mon, Dec 1, 2014 at 9:26 AM, Philipp Hoferichter <[email protected]> wrote: >> > Hi, >> > >> > i have tried to change the code, for the old version we´ve used (2.6 ... >> > ) >> > this works fine, for the new one: 2.8.1 the analysisd fails to start: >> > ./ossec-analysisd >> > 2014/12/01 15:22:37 Could not get ossec gid. >> > 2014/12/01 15:22:37 ossec-config(1202): ERROR: Configuration error at >> > '/lfs/ossec/etc/ossec.conf'. Exiting. >> > 2014/12/01 15:22:37 ossec-analysisd(1202): ERROR: Configuration error at >> > '/lfs/ossec/etc/ossec.conf'. Exiting. >> > >> > Problem is the acitve-response.c, but i can`t find the fix at the moment >> > :): >> > >> > struct group *os_group; >> > if((os_group = getgrnam(USER)) == NULL) >> > { >> > merror("Could not get ossec gid."); >> > fclose(fp); >> > return(-1); >> > } >> > >> > >> >> Without knowing what you've changed I don't really know how to help. >> I've never seen a need to mess in this area. >> >> > >> > >> > >> > On Monday, December 1, 2014 1:03:46 PM UTC+1, Philipp Hoferichter wrote: >> >> >> >> Hello Together, >> >> >> >> is it possible to change the default User and Group for ossec? >> >> >> >> Standard Accounts are defined in the InstallServer.sh, InstallAgent.sh >> >> and >> >> named ossec. >> >> Is there a way to change this default accounts? >> >> >> >> best regards >> >> >> >> philipp >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
