Re: Question on Prelude installation

What does:

ls -l /var/run/prelude-manager

say?

- Ramon

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Thierry
Herbreteau
Sent: Thursday, December 17, 2009 10:58 AM
To: [email protected]
Subject: [prelude-user] Question on Prelude installation

Hi,

I'm trying to install prelude for a project at university.
I'm running Ubuntu 9.10 in Vmware (on a PC).

I installed all the prelude modules with Synaptic packet manager (except
prelude-lml that produced errors, so I got the sources and recompiled
them).
I registered prelude-lml and snort as agents.
Prewikka works also (except that it does not see snort in the agent
list, if someone can point me out to the right place to make snort
working.... Is --prelude-enable flag for snort enough ?

Unfortunately, when I shut down linux and restart it later, none of the
modules are re-launched automatically.
And when I try to start prelude-manager manually, I get an error and
cannot launch it without reinstalling.

Below is the traces and the commands I entered following reboot:
root@ubuntu:~/util# prelude-manager
17 Dec 17:24:46 (process:2654) INFO: Subscribing Normalize to active
decoding plugins.
17 Dec 17:24:46 (process:2654) INFO: server started (listening on
127.0.0.1 port 4690).
17 Dec 17:24:47 (process:2654) INFO: Subscribing db[default] to active
reporting plugins.
17 Dec 17:24:47 (process:2654) ERROR: could not open
/var/run/prelude-manager for reading/writing. (manager-auth.c:633
manager_auth_init)
17 Dec 17:24:47 (process:2654) WARNING:
Profile 'prelude-manager' does not exist. In order to create it, please
run:
prelude-admin add "prelude-manager" --uid 0 --gid 0

root@ubuntu:~/util# prelude-admin add "prelude-manager" --uid 0 --gid 0
Could not create already existing profile 'prelude-manager'.

root@ubuntu:~/util# prelude-admin list -l
Profile         UID     GID     AnalyzerID       Permission      Issuer
AnalyzerID
------------------------------------------------------------------------
----------
prelude-lml     root    root    856293185750387  idmef:w admin:r
2920162410428449
prelude-manager prelude prelude 2920162410428449 n/a             n/a
snort           root    root    3089474316209304 idmef:w admin:r
2920162410428449

There's probably something I forgot during installation...
Any help would be really appreciated ;-)

Thx.
Thierry.

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user