Re: [Bulk] Re: Question on Prelude installation
Thierry Herbreteau <[email protected]> Sat, 19 Dec 2009 09:48:10 +0100
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
After testing, this file and the directory (prelude-manager) are suppressed following reboot. Prelude-manager needs to be reinstalled to make them to reappear. Any idea ? BR. Thierry. Le 18/12/2009 14:42, Thierry Herbreteau a écrit : > It says : > -rw------- 1 prelude prelude 139 2009-12-17 18:12 tls-parameters.data > > Thierry. > > Le 17/12/2009 20:40, G Ramon Gomez a écrit : > >> What does: >> >> ls -l /var/run/prelude-manager >> >> say? >> >> - Ramon >> >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of Thierry >> Herbreteau >> Sent: Thursday, December 17, 2009 10:58 AM >> To: [email protected] >> Subject: [prelude-user] Question on Prelude installation >> >> Hi, >> >> I'm trying to install prelude for a project at university. >> I'm running Ubuntu 9.10 in Vmware (on a PC). >> >> I installed all the prelude modules with Synaptic packet manager (except >> prelude-lml that produced errors, so I got the sources and recompiled >> them). >> I registered prelude-lml and snort as agents. >> Prewikka works also (except that it does not see snort in the agent >> list, if someone can point me out to the right place to make snort >> working.... Is --prelude-enable flag for snort enough ? >> >> Unfortunately, when I shut down linux and restart it later, none of the >> modules are re-launched automatically. >> And when I try to start prelude-manager manually, I get an error and >> cannot launch it without reinstalling. >> >> Below is the traces and the commands I entered following reboot: >> root@ubuntu:~/util# prelude-manager >> 17 Dec 17:24:46 (process:2654) INFO: Subscribing Normalize to active >> decoding plugins. >> 17 Dec 17:24:46 (process:2654) INFO: server started (listening on >> 127.0.0.1 port 4690). >> 17 Dec 17:24:47 (process:2654) INFO: Subscribing db[default] to active >> reporting plugins. >> 17 Dec 17:24:47 (process:2654) ERROR: could not open >> /var/run/prelude-manager for reading/writing. (manager-auth.c:633 >> manager_auth_init) >> 17 Dec 17:24:47 (process:2654) WARNING: >> Profile 'prelude-manager' does not exist. In order to create it, please >> run: >> prelude-admin add "prelude-manager" --uid 0 --gid 0 >> >> root@ubuntu:~/util# prelude-admin add "prelude-manager" --uid 0 --gid 0 >> Could not create already existing profile 'prelude-manager'. >> >> root@ubuntu:~/util# prelude-admin list -l >> Profile UID GID AnalyzerID Permission Issuer >> AnalyzerID >> ------------------------------------------------------------------------ >> ---------- >> prelude-lml root root 856293185750387 idmef:w admin:r >> 2920162410428449 >> prelude-manager prelude prelude 2920162410428449 n/a n/a >> snort root root 3089474316209304 idmef:w admin:r >> 2920162410428449 >> >> There's probably something I forgot during installation... >> Any help would be really appreciated ;-) >> >> Thx. >> Thierry. >> >> _______________________________________________ >> Prelude-user site list >> [email protected] >> http://lists.prelude-ids.org/mailman/listinfo/prelude-user >> >> >> > _______________________________________________ > Prelude-user site list > [email protected] > http://lists.prelude-ids.org/mailman/listinfo/prelude-user > > _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user