On Tue, Mar 17, 2015 at 8:34 AM, Gaetan Noel <[email protected]> wrote: > Thanks for you answer, you were right, the script waits for a ">" and our > switchs give us a "#" so I've changed the script accordingly and it works > now. > > Only problem is, when ossec runs that script it doesn't find the passwords > I'm thinking it's right issue on the .passlist. Would you mind giving me the > rights you have on the file on your environment ? >
Hopefully someone else can help you out, I don't currently use the agentless functionality. > Thanks, > Gaetan > > On Monday, March 16, 2015 at 10:23:29 AM UTC-4, dan (ddpbsd) wrote: >> >> On Fri, Mar 13, 2015 at 4:04 PM, Gaetan Noel <[email protected]> wrote: >> > Hello, >> > >> > I'm trying to setup agentless on our system but when I run the test >> > command >> > the script successfully connects to my switch but it looks like the >> > command >> > isn't run on it so it times out : >> > >> > [root@xxxxxxx:/var/ossec]# ./agentless/ssh_pixconfig_diff >> > switch_fim@xxxxxxxxxx >> > spawn ssh -c des switch_fim@xxxxxxxxx >> > No valid ciphers for protocol version 2 given, using defaults. >> > C >> > >> >> I don't know for sure, but I'd bet this output is confusing the script. >> >> > SWITCH_HOSTNAME# >> > ERROR: Timeout while running on host (too long to finish): >> > switch_fim@xxxxxxxxxx . >> > >> > All the config seems fine I've added the host using the correct command >> > and >> > the ossec.conf looks like this : >> > >> > <agentless> >> > <type>ssh_pixconfig_diff</type> >> > <frequency>60</frequency> >> > <host>switch_fim@xxxxxxxxxxxx</host> >> > <state>periodic_diff</state> >> > <arguments>show conf</arguments> >> > </agentless> >> > >> > Thanks in advance :-) >> > >> > -- >> > >> > --- >> > You received this message because you are subscribed to the Google >> > Groups >> > "ossec-list" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to [email protected]. >> > For more options, visit https://groups.google.com/d/optout. > > -- > > --- > You received this message because you are subscribed to the Google Groups > "ossec-list" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
