Files LOCATION and init were already correct, I applied the modification on src/headers/defs.h.
It is now operational on solaris, I am also going to operate the solution on AIX and Linux RedHat. Thank you Darin, Christophe Le jeudi 11 décembre 2014 20:16:16 UTC+1, Darin Perusich a écrit : > > These are relative to the basedir of unpacked source, adjust to taste ;-) > > # fix for FHS > sed -i 's%/var/ossec%/var/lib/ossec%' src/LOCATION > sed -i 's%/var/ossec%/var/lib/ossec%' src/headers/defs.h > > # don't forget the init script and init config > sed -i 's%/var/ossec%/var/lib/ossec%' src/init/ossec-hids-suse.init > sed -i 's%/var/ossec%/var/lib/ossec%' /etc/ossec-init.conf > > -- > Later, > Darin > > > On Thu, Dec 11, 2014 at 10:52 AM, christophe.egron > <[email protected] <javascript:>> wrote: > > Hi All, > > > > I meet difficulties to install ossec agent in a directory different of > > /var/ossec. > > During the installation I indicated a new target directory /mycustomdir. > > > > I find it in :~/ossec-hids-2.8.1/src/Config.OS > > > > CEXTRA= -DDEFAULTDIR=\"/mycustomdir\" -DCLIENT > > > > However the makefile of generation of the binary does not seem to use > this > > parameter and they always make a reference in /var/ossec > > i.e. error log message : ossec-agentd(1402): ERROR: Authentication key > file > > '/var/ossec/etc/client.keys' not found. > > > > To solve this problem I have to make a symbolic link /var/ossec ==> > > /mycustomdir. > > This symbolic link works for OSSEC on Solaris and AIX but not on Linux > > RedHat. > > > > Did I forget a parameter of configuration ? > > > > Thanks > > > > -- > > > > --- > > You received this message because you are subscribed to the Google > Groups > > "ossec-list" group. > > To unsubscribe from this group and stop receiving emails from it, send > an > > email to [email protected] <javascript:>. > > For more options, visit https://groups.google.com/d/optout. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
