Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-31 Thread dan (ddp)
I'll delete what I've got then. On Mon, Oct 31, 2011 at 1:48 PM, Kat wrote: > I am taking this up on my own to resolve this... Pretty good at RPMs - > working on a solution and a new SPEC file.. > > More to follow > -K > >

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-31 Thread Joe S
I'm happy to help test. On Mon, Oct 31, 2011 at 10:48 AM, Kat wrote: > I am taking this up on my own to resolve this... Pretty good at RPMs - > working on a solution and a new SPEC file.. > > More to follow > -K > >

[ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-31 Thread Kat
I am taking this up on my own to resolve this... Pretty good at RPMs - working on a solution and a new SPEC file.. More to follow -K

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-27 Thread dan (ddp)
On Thu, Oct 27, 2011 at 12:45 PM, Joe S wrote: > On Thu, Oct 27, 2011 at 5:36 AM, dan (ddp) wrote: >> On Thu, Oct 27, 2011 at 12:50 AM, Joe S wrote: >>> I wanted to look into this further, but I haven't had a lot of time. >>> Please let us know what you find. I think we're on our own as far as >

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-27 Thread Joe S
On Thu, Oct 27, 2011 at 5:36 AM, dan (ddp) wrote: > On Thu, Oct 27, 2011 at 12:50 AM, Joe S wrote: >> I wanted to look into this further, but I haven't had a lot of time. >> Please let us know what you find. I think we're on our own as far as >> getting working RPMs are concerned. >> > > What do

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-27 Thread dan (ddp)
I created some RPMs (based on Atomic's I think, but without the mysql crap and extras, and based on more current source). Unfortunately I haven't put enough time into it to figure out how to get decent ossec.confs in each package. It's kind of annoying. I created 2 virtual Centos 6 systems to test

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-27 Thread dan (ddp)
On Thu, Oct 27, 2011 at 12:50 AM, Joe S wrote: > I wanted to look into this further, but I haven't had a lot of time. > Please let us know what you find. I think we're on our own as far as > getting working RPMs are concerned. > What do you mean you're on your own? > On Tue, Oct 25, 2011 at 4:05

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-27 Thread Joe S
I wanted to look into this further, but I haven't had a lot of time. Please let us know what you find. I think we're on our own as far as getting working RPMs are concerned. On Tue, Oct 25, 2011 at 4:05 PM, Kat wrote: > Anyone every come up with a solution to this? I built rpms from the > Atomic

[ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-25 Thread Kat
Anyone every come up with a solution to this? I built rpms from the Atomic SPEC (modified) and same issue - if I replace "any" with the IP, it works, and I don't have to extract or reset the client end, it just magically starts working with I replace "any" with the IP. Trying to figure out what, i

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-11 Thread dan (ddp)
On Tue, Oct 11, 2011 at 5:19 PM, Joe S wrote: > So, would you agree that OSSEC 2.6 is just fine and the problem is > with the Atomic RPMs? > Yes. I've notified them (via IRC) that there is an issue. > Do you know if the rpm spec files will be updated anytime soon? > In the OSSEC source or Atomi

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-11 Thread Joe S
So, would you agree that OSSEC 2.6 is just fine and the problem is with the Atomic RPMs? Do you know if the rpm spec files will be updated anytime soon?

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread dan (ddp)
On Tue, Oct 4, 2011 at 6:35 PM, Joe S wrote: > > So when I looked at the server code, it appears that it checks the key > first, then if that fails it checks the IP, and if the IP doesn't > match, it gives the 1213 error. It can't match the IP because we are > using "any". > 'any' is supposed to

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread dan (ddp)
On Tue, Oct 4, 2011 at 6:36 PM, Joe S wrote: > >> >> > So the problem seems to either be your systems, or the atomic RPMs. >> >> It doesn't seem to work for me with atomic RPMs either, but I don't >> get any errors. Just no connection. > > The atomic RPMs remoted logging seems broken. Install the

[ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread Joe S
> > > So the problem seems to either be your systems, or the atomic RPMs. > > It doesn't seem to work for me with atomic RPMs either, but I don't > get any errors. Just no connection. The atomic RPMs remoted logging seems broken. Install the server from source and you'll get the 1213 errors

[ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread Joe S
On Oct 4, 12:42 pm, "dan (ddp)" wrote: > On Tue, Oct 4, 2011 at 3:17 PM, Joe S wrote: > > >> IP of ANY is still not working of me on the following setup: > > >> * Clients (multiple RHEL 6.1 AMD64) using Atomic ossec-hids-client > >> * Server (RHEL 5.7 AMD64) using OSSEC tar.gz with patches from

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread dan (ddp)
On Tue, Oct 4, 2011 at 3:42 PM, dan (ddp) wrote: > On Tue, Oct 4, 2011 at 3:17 PM, Joe S wrote: >> >> >> >>> IP of ANY is still not working of me on the following setup: >>> >>> * Clients (multiple RHEL 6.1 AMD64) using Atomic ossec-hids-client >>> * Server (RHEL 5.7 AMD64) using OSSEC tar.gz wit

Re: [ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread dan (ddp)
On Tue, Oct 4, 2011 at 3:17 PM, Joe S wrote: > > > >> IP of ANY is still not working of me on the following setup: >> >> * Clients (multiple RHEL 6.1 AMD64) using Atomic ossec-hids-client >> * Server (RHEL 5.7 AMD64) using OSSEC tar.gz with patches from >> mercurial. >> >> I know this is an open s

[ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread Joe S
> IP of ANY is still not working of me on the following setup: > > * Clients (multiple RHEL 6.1 AMD64) using Atomic ossec-hids-client > * Server (RHEL 5.7 AMD64) using OSSEC tar.gz with patches from > mercurial. > > I know this is an open source project and I intend to make no demands > of anyon

[ossec-list] Re: ossec-authd or agent-auth is not creating valid keys

2011-10-04 Thread Joe S
On Oct 4, 11:22 am, Joe S wrote: > After numerous days of testing, I can confirm that invalid keys are > getting created when I use the process described here: > > http://dcid.me/2011/01/automatically-creating-and-setting-up-the-agen... > > I rolled out the Atomic ossec-client RPM to 10 clients.