Re: [Bulk] Re: Question on Prelude installation

Thierry Herbreteau <[email protected]> Sat, 19 Dec 2009 09:48:10 +0100
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
After testing, this file and the directory (prelude-manager) are suppressed following reboot.
Prelude-manager needs to be reinstalled to make them to reappear.
Any idea ?

BR.
Thierry.


Le 18/12/2009 14:42, Thierry Herbreteau a écrit :
> It says :
> -rw------- 1 prelude prelude 139 2009-12-17 18:12 tls-parameters.data
>
> Thierry.
>
> Le 17/12/2009 20:40, G Ramon Gomez a écrit :
>   
>> What does:
>>
>> ls -l /var/run/prelude-manager
>>
>> say?
>>
>> - Ramon
>>
>> -----Original Message-----
>> From: [email protected]
>> [mailto:[email protected]] On Behalf Of Thierry
>> Herbreteau
>> Sent: Thursday, December 17, 2009 10:58 AM
>> To: [email protected]
>> Subject: [prelude-user] Question on Prelude installation
>>
>> Hi,
>>
>> I'm trying to install prelude for a project at university.
>> I'm running Ubuntu 9.10 in Vmware (on a PC).
>>
>> I installed all the prelude modules with Synaptic packet manager (except
>> prelude-lml that produced errors, so I got the sources and recompiled
>> them).
>> I registered prelude-lml and snort as agents.
>> Prewikka works also (except that it does not see snort in the agent
>> list, if someone can point me out to the right place to make snort
>> working.... Is --prelude-enable flag for snort enough ?
>>
>> Unfortunately, when I shut down linux and restart it later, none of the
>> modules are re-launched automatically.
>> And when I try to start prelude-manager manually, I get an error and
>> cannot launch it without reinstalling.
>>
>> Below is the traces and the commands I entered following reboot:
>> root@ubuntu:~/util# prelude-manager
>> 17 Dec 17:24:46 (process:2654) INFO: Subscribing Normalize to active
>> decoding plugins.
>> 17 Dec 17:24:46 (process:2654) INFO: server started (listening on
>> 127.0.0.1 port 4690).
>> 17 Dec 17:24:47 (process:2654) INFO: Subscribing db[default] to active
>> reporting plugins.
>> 17 Dec 17:24:47 (process:2654) ERROR: could not open
>> /var/run/prelude-manager for reading/writing. (manager-auth.c:633
>> manager_auth_init)
>> 17 Dec 17:24:47 (process:2654) WARNING:
>> Profile 'prelude-manager' does not exist. In order to create it, please
>> run:
>> prelude-admin add "prelude-manager" --uid 0 --gid 0
>>
>> root@ubuntu:~/util# prelude-admin add "prelude-manager" --uid 0 --gid 0
>> Could not create already existing profile 'prelude-manager'.
>>
>> root@ubuntu:~/util# prelude-admin list -l
>> Profile         UID     GID     AnalyzerID       Permission      Issuer
>> AnalyzerID
>> ------------------------------------------------------------------------
>> ----------
>> prelude-lml     root    root    856293185750387  idmef:w admin:r
>> 2920162410428449
>> prelude-manager prelude prelude 2920162410428449 n/a             n/a
>> snort           root    root    3089474316209304 idmef:w admin:r
>> 2920162410428449
>>
>> There's probably something I forgot during installation...
>> Any help would be really appreciated ;-)
>>
>> Thx.
>> Thierry.
>>
>> _______________________________________________
>> Prelude-user site list
>> [email protected]
>> http://lists.prelude-ids.org/mailman/listinfo/prelude-user
>>
>>   
>>     
> _______________________________________________
> Prelude-user site list
> [email protected]
> http://lists.prelude-ids.org/mailman/listinfo/prelude-user
>
>   
_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-ids.org/mailman/listinfo/prelude-user