Hi, it looks like a firewall issue. You could run tcpdump in the Manager to see if there are a connection between the manager and the agent.
Regards. On Monday, October 3, 2016 at 10:02:52 AM UTC+2, Ali Khan wrote: > > Hi All, > > I am trying to use ossec-authd and agent-authd for auto agent key > registration . On OSSEC server i did the following > > > 1. *openssl genrsa -out /var/ossec/etc/sslmanager.key 2048* > 2. *openssl req -new -x509 -key /var/ossec/etc/sslmanager.key -out > /var/ossec/etc/sslmanager.cert -days 365* > 3. */var/ossec/bin/ossec-authd -p 1515 -i >/dev/null 2>&1 &* > 4. *also added the following rule in etc/ossim/firewall_include : * > 5. *-A INPUT –p tcp –-dport 1515 –j ACCEPT* > 6. *Run the ossim-reconfig and then again run **/var/ossec/bin/ossec-authd > -p 1515 -i >/dev/null 2>&1 and the process starts.* > > > *However on agent side when i enter **./agent-auth -m 192.168.10.246 -p > 1515 it gives me the following error .* > > 2016/10/03 12:34:58 ossec-authd: INFO: Started (pid: 9656). > 2016/10/03 12:34:58 ossec-authd: Unable to connect to 192.168.10.246:1515 > > Any kind of help would be highly appreciated as I cant think of workaround > for this issue . > > Looking forward to your reply. > -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
