Hi All,
I installed ossec-hids and ossec-hids-server package using yum. Ossec
version is 2.9.3.
ossec-hids starts perfectly but when I went to start ossec-hids-authd
deamon it simply fail to start. From what I understand is that
ossec-hids-authd is not generating any pid file causing systemctl to fail.
[root@ip-10-0-197-117 ~]# systemctl status ossec-hids-authd.service
● ossec-hids-authd.service - LSB: Authentication Daemon for OSSEC-HIDS.
Loaded: loaded (/etc/rc.d/init.d/ossec-hids-authd; bad; vendor preset:
disabled)
Active: activating (start) since Wed 2018-02-21 18:40:49 UTC; 15s ago
Docs: man:systemd-sysv-generator(8)
Process: 8579 ExecStart=/etc/rc.d/init.d/ossec-hids-authd start
(code=exited, status=0/SUCCESS)
CGroup: /system.slice/ossec-hids-authd.service
└─8585 /var/ossec/bin/ossec-authd -p 1515
Feb 21 18:40:49 ip-10-0-197-117.ec2.internal systemd[1]: Starting LSB:
Authentication Daemon for OSSEC-HIDS....
Feb 21 18:40:49 ip-10-0-197-117.ec2.internal ossec-hids-authd[8579]: [39B
blob data]
Feb 21 18:40:49 ip-10-0-197-117.ec2.internal systemd[1]: PID file
/var/run/ossec-authd.pid not readable (yet?) after start.
Feb 21 18:40:49 ip-10-0-197-117.ec2.internal ossec-hids-authd[8579]:
2018/02/21 18:40:49 ossec-authd: INFO: Started (pid: 8585).
[root@ip-10-0-197-117 ~]# cat /var/run/ossec-authd.pid
cat: /var/run/ossec-authd.pid: No such file or directory
As it can be seen that ossec-hids-authd started but since there is no pid
file systemctl failed. Is there any way to correct this issue?
--
---
You received this message because you are subscribed to the Google Groups
"ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
