[Ossec-list] RE : Installing a pre-compiled agent on another machine

[fcr-mailings at nerim.net (Fred)]

Thanks for the answer.

Another question: should/must I create a user and a group "ossec" on servers
? If yes, how should I use them (to be secure):

	- give root user rights to /var/ossec (default)
	- give ossec group rights to /var/ossec (default)
	- other...?

Thanks.

Fred

PS: I'll write a small "how to export pre-compiled agent"


-----Original Message-----
From: ahmet ozturk [mailto:oahmet at metu.edu.tr] 
Sent: Thursday, March 23, 2006 4:17 PM
To: Fred
Cc: ossec-list at ossec.net
Subject: Re: [Ossec-list] Installing a pre-compiled agent on another machine


Hi Fred,

ossec client-installation installes the following binaries:

- manage_agents
- ossec-control
- ossec-logcollector
- ossec-agentd
- ossec-execd
- ossec-syscheckd

I think easiest way to do what you want would be make a prototype
installation on a client and copy the entire /var/ossec directory 
on to  other client  machines.

then you should add the new client on server, extract its key and
import it in the client.
(please see: http://www.ossec.net/en/manual.html#manageagents)

also don't forget to customize the /var/ossec/etc/ossec.conf file
for localfiles, active responses, etc.

Regards,

~ahmet.