Re: prelude-admin list shows empty profile
"LC Bruzenak" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
... > > > > It look like you registered this Prelude-Manager to itself, most > probably a prelude-adduser mistake. > > > idmef:w 676935298793643 > > idmef:w 2425523859259492 > > And I guess both theses are remote Prelude-Manager which your local > manager relays alerts to. > > OK - you have hit everything right on the head so far; thanks! Sorry to be a pain, however on the client machine I decided to remove the prelude-manager and was going to re-register with the just the parent manager. Before I re-registered though I wanted to see that the relaying was not working, so I could see it start working again on re-registering. However, it didn't seem to stop relaying events. prelude-admin shows the prelude-manager gone on the client: [root@v6auditsvr ~]# prelude-admin list -l Profile UID GID AnalyzerID Permission Issuer AnalyzerID ---------------------------------------------------------------- prelude-lml root root 1850024011404062 idmef:w 3972034208352731 auditd root root 68231058835998 idmef:w 3972034208352731 The server shows: [root@auditmaster default]# prelude-admin list -l Profile UID GID AnalyzerID Permission Issuer AnalyzerID --------------------------------------------------- prelude-manager root root 2425523859259492 n/a n/a Thanks! LCB. -- LC (Lenny) Bruzenak _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user