> Were the users and group created successfully? yes, only the analysisd will not start, because the above if statement in the active-response.c
best regards Am Montag, 1. Dezember 2014 15:57:40 UTC+1 schrieb dan (ddpbsd): > > On Mon, Dec 1, 2014 at 9:54 AM, Philipp Hoferichter <[email protected] > <javascript:>> wrote: > > Hi, > > > > i have changed: > > USER and Group variable values in: > > ossec-hids-2.8.1/src/InstallAgent.sh and InstallServer.sh > > > > and in ".../src/headers" following vars: > > #define USER > > #define GROUPGLOBAL > > > > Were the users and group created successfully? > > > > > > > On Monday, December 1, 2014 3:39:42 PM UTC+1, dan (ddpbsd) wrote: > >> > >> On Mon, Dec 1, 2014 at 9:26 AM, Philipp Hoferichter <[email protected]> > wrote: > >> > Hi, > >> > > >> > i have tried to change the code, for the old version we´ve used (2.6 > ... > >> > ) > >> > this works fine, for the new one: 2.8.1 the analysisd fails to start: > >> > ./ossec-analysisd > >> > 2014/12/01 15:22:37 Could not get ossec gid. > >> > 2014/12/01 15:22:37 ossec-config(1202): ERROR: Configuration error at > >> > '/lfs/ossec/etc/ossec.conf'. Exiting. > >> > 2014/12/01 15:22:37 ossec-analysisd(1202): ERROR: Configuration error > at > >> > '/lfs/ossec/etc/ossec.conf'. Exiting. > >> > > >> > Problem is the acitve-response.c, but i can`t find the fix at the > moment > >> > :): > >> > > >> > struct group *os_group; > >> > if((os_group = getgrnam(USER)) == NULL) > >> > { > >> > merror("Could not get ossec gid."); > >> > fclose(fp); > >> > return(-1); > >> > } > >> > > >> > > >> > >> Without knowing what you've changed I don't really know how to help. > >> I've never seen a need to mess in this area. > >> > >> > > >> > > >> > > >> > On Monday, December 1, 2014 1:03:46 PM UTC+1, Philipp Hoferichter > wrote: > >> >> > >> >> Hello Together, > >> >> > >> >> is it possible to change the default User and Group for ossec? > >> >> > >> >> Standard Accounts are defined in the InstallServer.sh, > InstallAgent.sh > >> >> and > >> >> named ossec. > >> >> Is there a way to change this default accounts? > >> >> > >> >> best regards > >> >> > >> >> philipp > >> > > >> > -- > >> > > >> > --- > >> > You received this message because you are subscribed to the Google > >> > Groups > >> > "ossec-list" group. > >> > To unsubscribe from this group and stop receiving emails from it, > send > >> > an > >> > email to [email protected]. > >> > For more options, visit https://groups.google.com/d/optout. > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
