Hi All, I installed ossec-hids and ossec-hids-server package using yum. Ossec version is 2.9.3.
ossec-hids starts perfectly but when I went to start ossec-hids-authd deamon it simply fail to start. From what I understand is that ossec-hids-authd is not generating any pid file causing systemctl to fail. [root@ip-10-0-197-117 ~]# systemctl status ossec-hids-authd.service ● ossec-hids-authd.service - LSB: Authentication Daemon for OSSEC-HIDS. Loaded: loaded (/etc/rc.d/init.d/ossec-hids-authd; bad; vendor preset: disabled) Active: activating (start) since Wed 2018-02-21 18:40:49 UTC; 15s ago Docs: man:systemd-sysv-generator(8) Process: 8579 ExecStart=/etc/rc.d/init.d/ossec-hids-authd start (code=exited, status=0/SUCCESS) CGroup: /system.slice/ossec-hids-authd.service └─8585 /var/ossec/bin/ossec-authd -p 1515 Feb 21 18:40:49 ip-10-0-197-117.ec2.internal systemd[1]: Starting LSB: Authentication Daemon for OSSEC-HIDS.... Feb 21 18:40:49 ip-10-0-197-117.ec2.internal ossec-hids-authd[8579]: [39B blob data] Feb 21 18:40:49 ip-10-0-197-117.ec2.internal systemd[1]: PID file /var/run/ossec-authd.pid not readable (yet?) after start. Feb 21 18:40:49 ip-10-0-197-117.ec2.internal ossec-hids-authd[8579]: 2018/02/21 18:40:49 ossec-authd: INFO: Started (pid: 8585). [root@ip-10-0-197-117 ~]# cat /var/run/ossec-authd.pid cat: /var/run/ossec-authd.pid: No such file or directory As it can be seen that ossec-hids-authd started but since there is no pid file systemctl failed. Is there any way to correct this issue? -- --- You received this message because you are subscribed to the Google Groups "ossec-list" group. To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.