Hopefully fix Issue 1379

[ddpbsd]

Rename label_t to OS_label_t (and label to OS_label just for fun).
Waiting on confirmation that this fixes it.

[holly1954]

i get this error now
In file included from os_auth/main-client.c:26:0:
os_auth/check_cert.h:53:47: error: unknown type name 'label'
int label_match(const OS_label *label1, const label *label2);
^~~~~
make: *** [Makefile:1007: os_auth/main-client.o] Error 1

[holly1954]

my fault i see my error

[ddpbsd]

If it works, I'll merge it. :-)

[holly1954]

that worked for that now having an issue with the installation of the files the useradd/groupadd did not work i added the userid/group and am trying to remake agent now

[holly1954]

it is not installing the files
this is the errors

./init/adduser.sh ossec ossecm ossecr ossec /var/ossec
Wait for success...
Usage: useradd [ -c comment ] [-d dir ] [ -e expire ] [ -g group ] [ -G group1,group2 ... ] [ -m [ -k skel_dir ] ] [ -u uid ] [ -s shell ] [ -r role1,role2 ... ] login
make: *** [Makefile:360: install-common] Error 2
cp: cannot create regular file '/var/ossec/etc/ossec-init.conf': A file or directory in the path name does not exist.
chmod: cannot access '/var/ossec/etc/ossec-init.conf': A file or directory in the path name does not exist.
ln: failed to create symbolic link '/etc/rc.d/rc2.d/S97ossec': Do not specify an existing file.
ln: failed to create symbolic link '/etc/rc.d/rc3.d/S97ossec': Do not specify an existing file.

trying with commented out line 360

[holly1954]

that did it also had to comment out the PATH for AIX line 56 in Makefile
line 382 #install -m 0440 -o root -g ${OSSEC_GROUP} /etc/localtime ${PREFIX}/etc
missing /var/ossec/etc/shared/agent.conf': XMLERR: File '/var/ossec/etc/shared/agent.conf' not found. (line 59). seeing if i can find it

[ddpbsd]

Were any of the ossec users created?
It looks like the useradd command it's trying to use is:
useradd ossec -d /var/ossec -s /bin/false -g ossec

Based on what you posted, it should probably be:
useradd -d /var/ossec -g ossec -s /bin/false ossec

I'll update it and add the changes to this PR.

[ddpbsd]

The changes are in https://github.com/ossec/ossec-hids/pull/1392/files#diff-ed1cc1c6e87056911a4097057df0544b

[holly1954]

Aix does not normally use useradd they have a smitty user cli that is used to add users and groups Nothing was added I added it using the smitty tool From: Dan Parriott [mailto:notifications@github.com] Sent: Tuesday, April 03, 2018 1:59 PM To: ossec/ossec-hids <ossec-hids@noreply.github.com> Cc: Lund, Holly (CONTR) <holly.lund@hq.doe.gov>; Comment <comment@noreply.github.com> Subject: Re: [ossec/ossec-hids] Hopefully fix Issue 1379 (#1392) Were any of the ossec users created? It looks like the useradd command it's trying to use is: useradd ossec -d /var/ossec -s /bin/false -g ossec Based on what you posted, it should probably be: useradd -d /var/ossec -g ossec -s /bin/false ossec I'll update it and add the changes to this PR. — You are receiving this because you commented. Reply to this email directly, view it on GitHub<#1392 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AkSKbbmuZiuht06jAmF6ERS9iI1q7Nloks5tk7hxgaJpZM4TFYdf>.

[ddpbsd]

What's the smitty command to add users and groups? Adding those in shouldn't be too difficult.

[holly1954]

From the smitty log when I created the user/group For group mkgroup -'A' id='6667' ossec Usage: mkgroup [-R load_module] [-a] [-A] "attr=value" ... newgroup For user mkuser id='6667' admin='false' pgrp='ossec' home='/var/ossec' gecos='OSSEC Client' ossec Usage: mkuser [-R load_module] [-a] "attr=value" ... newuser From: Dan Parriott [mailto:notifications@github.com] Sent: Friday, April 06, 2018 7:37 AM To: ossec/ossec-hids <ossec-hids@noreply.github.com> Cc: Lund, Holly (CONTR) <holly.lund@hq.doe.gov>; Comment <comment@noreply.github.com> Subject: Re: [ossec/ossec-hids] Hopefully fix Issue 1379 (#1392) What's the smitty command to add users and groups? Adding those in shouldn't be too difficult. — You are receiving this because you commented. Reply to this email directly, view it on GitHub<#1392 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AkSKbU01z3iMCmxj4zlfVitoorM6EOlVks5tl1NQgaJpZM4TFYdf>.