Security Onion 2.3.10 sensor salt state problems (ubuntnu 18.04) #2162

w4rc0n · 2020-12-01T18:53:59Z

w4rc0n
Dec 1, 2020

Hello,

I'm doing an install of 2.3.10 on Ubuntu 18.04, in this case the sensor node. I have the manager node, and searc hnode installed both also on Ubuntu 18.04 and both are already fully configured and running. (manager:VM, search,sensor:hardware) The install of the sensor completed with errors. so-status revealed that all of the docker containers were running except for steno. Running so-start steno yields salt errors. When running a high state, the following states fail:

      ID: socore
Function: user.present
  Result: False
 Comment: An exception occurred in this state: Traceback (most recent call last):
            File "/usr/lib/python3/dist-packages/salt/state.py", line 2154, in call
              *cdata["args"], **cdata["kwargs"]
            File "/usr/lib/python3/dist-packages/salt/loader.py", line 2106, in wrapper
              return f(*args, **kwargs)
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 630, in present
              allow_gid_change,
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 101, in _changes
              lshad = __salt__["shadow.info"](name)
            File "/usr/lib/python3/dist-packages/salt/modules/linux_shadow.py", line 85, in info
              data = getspnam(name)
          FileNotFoundError: [Errno 2] No such file or directory
 Started: 18:43:21.940229
Duration: 7.016 ms
 Changes:

      ID: stenographer
Function: user.present
  Result: False
 Comment: An exception occurred in this state: Traceback (most recent call last):
            File "/usr/lib/python3/dist-packages/salt/state.py", line 2154, in call
              *cdata["args"], **cdata["kwargs"]
            File "/usr/lib/python3/dist-packages/salt/loader.py", line 2106, in wrapper
              return f(*args, **kwargs)
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 630, in present
              allow_gid_change,
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 101, in _changes
              lshad = __salt__["shadow.info"](name)
            File "/usr/lib/python3/dist-packages/salt/modules/linux_shadow.py", line 85, in info
              data = getspnam(name)
          FileNotFoundError: [Errno 2] No such file or directory
 Started: 18:43:54.819397
Duration: 3.518 ms
 Changes:

      ID: stenoconf
Function: file.managed
    Name: /opt/so/conf/steno/config
  Result: False
 Comment: User stenographer is not available
 Started: 18:43:54.830124
Duration: 4.094 ms
 Changes:

      ID: so-steno
Function: docker_container.running
  Result: False
 Comment: One or more requisite failed: pcap.stenoconf
 Started: 18:43:54.892125
Duration: 0.008 ms
 Changes:

      ID: suricata
Function: user.present
  Result: False
 Comment: An exception occurred in this state: Traceback (most recent call last):
            File "/usr/lib/python3/dist-packages/salt/state.py", line 2154, in call
              *cdata["args"], **cdata["kwargs"]
            File "/usr/lib/python3/dist-packages/salt/loader.py", line 2106, in wrapper
              return f(*args, **kwargs)
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 630, in present
              allow_gid_change,
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 101, in _changes
              lshad = __salt__["shadow.info"](name)
            File "/usr/lib/python3/dist-packages/salt/modules/linux_shadow.py", line 85, in info
              data = getspnam(name)
          FileNotFoundError: [Errno 2] No such file or directory
 Started: 18:43:56.634769
Duration: 4.566 ms
 Changes:

      ID: /usr/local/bin/surilogcompress
Function: cron.present
  Result: False
 Comment: An exception occurred in this state: Traceback (most recent call last):
            File "/usr/lib/python3/dist-packages/salt/state.py", line 2154, in call
              *cdata["args"], **cdata["kwargs"]
            File "/usr/lib/python3/dist-packages/salt/loader.py", line 2106, in wrapper
              return f(*args, **kwargs)
            File "/usr/lib/python3/dist-packages/salt/states/cron.py", line 373, in present
              identifier=identifier,
            File "/usr/lib/python3/dist-packages/salt/modules/cron.py", line 730, in set_job
              comdat = _write_cron_lines(user, _render_tab(lst))
            File "/usr/lib/python3/dist-packages/salt/modules/cron.py", line 282, in _write_cron_lines
              path, "w+", uid=__salt__["file.user_to_uid"](user), mode=0o600
            File "/usr/lib/python3.6/contextlib.py", line 81, in __enter__
              return next(self.gen)
            File "/usr/lib/python3/dist-packages/salt/utils/files.py", line 467, in fpopen
              os.chown(path, uid, gid)
          TypeError: uid should be integer, not str
 Started: 18:43:56.780036
Duration: 21.835 ms
 Changes:

      ID: zeek
Function: user.present
  Result: False
 Comment: An exception occurred in this state: Traceback (most recent call last):
            File "/usr/lib/python3/dist-packages/salt/state.py", line 2154, in call
              *cdata["args"], **cdata["kwargs"]
            File "/usr/lib/python3/dist-packages/salt/loader.py", line 2106, in wrapper
              return f(*args, **kwargs)
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 630, in present
              allow_gid_change,
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 101, in _changes
              lshad = __salt__["shadow.info"](name)
            File "/usr/lib/python3/dist-packages/salt/modules/linux_shadow.py", line 85, in info
              data = getspnam(name)
          FileNotFoundError: [Errno 2] No such file or directory
 Started: 18:43:58.672782
Duration: 10004.326 ms
 Changes:

      ID: ossecm
Function: user.present
  Result: False
 Comment: An exception occurred in this state: Traceback (most recent call last):
            File "/usr/lib/python3/dist-packages/salt/state.py", line 2154, in call
              *cdata["args"], **cdata["kwargs"]
            File "/usr/lib/python3/dist-packages/salt/loader.py", line 2106, in wrapper
              return f(*args, **kwargs)
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 630, in present
              allow_gid_change,
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 101, in _changes
              lshad = __salt__["shadow.info"](name)
            File "/usr/lib/python3/dist-packages/salt/modules/linux_shadow.py", line 85, in info
              data = getspnam(name)
          FileNotFoundError: [Errno 2] No such file or directory
 Started: 18:44:14.772449
Duration: 4.956 ms
 Changes:

      ID: ossecr
Function: user.present
  Result: False
 Comment: An exception occurred in this state: Traceback (most recent call last):
            File "/usr/lib/python3/dist-packages/salt/state.py", line 2154, in call
              *cdata["args"], **cdata["kwargs"]
            File "/usr/lib/python3/dist-packages/salt/loader.py", line 2106, in wrapper
              return f(*args, **kwargs)
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 630, in present
              allow_gid_change,
            File "/usr/lib/python3/dist-packages/salt/states/user.py", line 101, in _changes
              lshad = __salt__["shadow.info"](name)
            File "/usr/lib/python3/dist-packages/salt/modules/linux_shadow.py", line 85, in info
              data = getspnam(name)
          FileNotFoundError: [Errno 2] No such file or directory
 Started: 18:44:14.777818
Duration: 6.083 ms
 Changes:

      ID: ossec
Function: user.present
  Result: False
 Comment: These values could not be changed: {'uid': 945, 'home': '/nsm/wazuh'}
 Started: 18:44:14.784300
Duration: 149.561 ms
 Changes:

I'm not sure what to investigate in this case, but am more than willing to provide any other details that may help clarify what is going on.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Security Onion 2.3.10 sensor salt state problems (ubuntnu 18.04) #2162

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Security Onion 2.3.10 sensor salt state problems (ubuntnu 18.04) #2162

Uh oh!

Uh oh!

w4rc0n Dec 1, 2020

Replies: 0 comments

w4rc0n
Dec 1, 2020