[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ossec-dev
Subject:    [ossec-dev] puppet class ossec::client not register new client to ossec server.
From:       Nguyễn_Đức_Thịnh <ducthinh993 () gmail ! com
Date:       2017-02-26 16:15:54
Message-ID: c9d4570c-e273-4fae-8659-e9f57eff76cd () googlegroups ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Hi all,
I got a problem when deploy ossec client through puppet. It seem like my 
client not send any request to ossec-authd port 1515 by puppet. 
But everything ok when I execute: /var/ossec/bin/agent-auth -m 
${ossec_server_address} -A ${::fqdn} -D /var/ossec/ manual from commandline.

This is screenshot during puppet agent -t apply on client.

<https://lh3.googleusercontent.com/-xSLSUs0DG-8/WLL-qSSjVRI/AAAAAAAAGts/JBI-Ioqfgf4xj5 \
fRJ0L6r_ABIcZRJhWwACLcB/s1600/Screen%2BShot%2B2017-02-26%2Bat%2B12.29.33%2BAM.png>

I think there is some problem with puppet agent, so it not exec these codes 
in client.pp :
$ossec_server_address = pick($ossec_server_ip, $ossec_server_hostname)
    exec { 'agent-auth':
      command => "/var/ossec/bin/agent-auth -m ${ossec_server_address} -A 
${::fqdn} -D /var/ossec/",
      creates => '/var/ossec/etc/client.keys',
      require => Package[$agent_package_name],
    }

As you can see, my client not send any packet to ossec server but still 
have client.keys content.
Any one got this problem before, or any idea to troubleshoot this issue.
Thanks for reading this.

-- 

--- 
You received this message because you are subscribed to the Google Groups "ossec-dev" \
group. To unsubscribe from this group and stop receiving emails from it, send an \
email to ossec-dev+unsubscribe@googlegroups.com. For more options, visit \
https://groups.google.com/d/optout.


[Attachment #5 (text/html)]

<div dir="ltr">Hi all,<div>I got a problem when deploy ossec client through puppet. \
It seem like my client not send any request to ossec-authd port 1515 by puppet.  \
</div><div>But everything ok when I execute:  /var/ossec/bin/agent-auth -m \
${ossec_server_address} -A ${::fqdn} -D /var/ossec/ manual from \
commandline.</div><div><br></div><div>This is screenshot during puppet agent -t apply \
on client.</div><div><br></div><p class="separator" style="text-align: center; clear: \
both;"><a imageanchor="1" \
href="https://lh3.googleusercontent.com/-xSLSUs0DG-8/WLL-qSSjVRI/AAAAAAAAGts/JBI-Ioqfg \
f4xj5fRJ0L6r_ABIcZRJhWwACLcB/s1600/Screen%2BShot%2B2017-02-26%2Bat%2B12.29.33%2BAM.png" \
style="margin-left: 1em; margin-right: 1em;"><img \
src="https://lh3.googleusercontent.com/-xSLSUs0DG-8/WLL-qSSjVRI/AAAAAAAAGts/JBI-Ioqfgf \
4xj5fRJ0L6r_ABIcZRJhWwACLcB/s1600/Screen%2BShot%2B2017-02-26%2Bat%2B12.29.33%2BAM.png" \
border="0" style=""></a></p><div><br></div><div>I think there is some problem with \
puppet agent, so it not exec these codes in client.pp \
:</div><div><div>$ossec_server_address = pick($ossec_server_ip, \
$ossec_server_hostname)</div><div>      exec { &#39;agent-auth&#39;:</div><div>       \
command =&gt; &quot;/var/ossec/bin/agent-auth -m ${ossec_server_address} -A ${::fqdn} \
-D /var/ossec/&quot;,</div><div>         creates =&gt; \
&#39;/var/ossec/etc/client.keys&#39;,</div><div>         require =&gt; \
Package[$agent_package_name],</div><div>      \
}</div></div><div><br></div><div><div>As you can see, my client not send any packet \
to ossec server but still have client.keys content.<br>Any one got this problem \
before, or any idea to troubleshoot this issue.</div><div>Thanks for reading \
this.</div></div></div>

<p></p>

-- <br />
<br />
--- <br />
You received this message because you are subscribed to the Google Groups \
&quot;ossec-dev&quot; group.<br /> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:ossec-dev+unsubscribe@googlegroups.com">ossec-dev+unsubscribe@googlegroups.com</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>



[prev in list] [next in list] [prev in thread] [next in thread]