I need help about the "OSSEC Web User Interface (wui) Install"

[yangguyu44944]

Hi ,

 Sorry to trouble you guys,but I don't have a better way to solve this problem.I followed the instrution "OSSEC Web User Interface (wui) Install" .

  step 1,I downloaded the ossec-wui-0.3.tar.gz,OSSEC-GPG-KEY.asc,ossec-wui-0.3-checksum.txt,ossec-wui-0.3.tar.gz.gz.

  step 2,I use the command md5sum instead of md5 which is not available,and I use the sha1sum instead of sha1.Then I get the result:

  md5sum ossec-wui-0.3.tar.gz
c79fa486e9a20fb06a517541033af304  ossec-wui-0.3.tar.gz

sha1sum ossec-wui-0.3.tar.gz
e00bff680721982ee55295a5292eb4e2a638b820  ossec-wui-0.3.tar.gz

step 3, then when I use the gpg --verify ossec-wui-0.3.tar.gz.sig ossec-wui-0.3.tar.gz ,I get the error:

ossim:/var/www# gpg --verify ossec-wui-0.3.tar.gz.sig ossec-wui-0.3.tar.gz
gpg: no valid OpenPGP data found.
gpg: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
step 4,I understand that I need the PGP key.But when I follow the instruction,I still get error.

ossim:/var/www# gpg --import OSSEC-GPG-KEY.asc
gpg: key 6B30327E: "Daniel B. Cid (Ossec development) <dc...@ossec.net>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

ossim:/var/www# gpg --verify file.sig file
gpg: can't open `file.sig'
gpg: verify signatures failed: file open error

 

I know that I don't have the file.sig,but I don't know where can I download it .

step 4 , I have done all the follow steps as the instruction,but when I
access the UI ,I get the error :Warning: opendir(/var/ossec/etc/ossec.conf) [function.opendir]: failed to open dir: Permission denied in /var/www/ossec-wui/lib/os_lib_handle.php on line 94
Unable to access ossec directory.
 

I will be grateful if you can give some advice.

 Regards.

                                                Jack yang

 

---

穿越地震带 纪念汶川地震一周年

[Daniel Cid]

Hi,

The error you are getting means that Apache can't access the ossec
directory. This
document has a better step by step than the wiki one:

http://www.ossec.net/main/manual/wui-ubuntu/

You need to make sure that you give apache the proper permissions:

*To get the username that Apache is running
root@home:/var/www/ossec# ps auwx |grep apache | cut -d " " -f 1 |
grep -v root | uniq
www-data

*Adding access to the ossec dir:
root@home:/var/www/ossec# usermod -a -G ossec www-data
root@home:/var/www/ossec# cat /etc/group |grep ossec
ossec:x:1001:www-data

*Fixing ./tmp permissions
root@home:/var/www/ossec# chmod 770 tmp/
root@home:/var/www/ossec# chgrp www-data tmp/
root@home:/var/www/ossec# apache2ctl restart

Hope it helps.

--
Daniel B. Cid
dcid ( at ) ossec.net

2009/5/7 yangguyu44944 <yanggu...@163.com>:

[Daniel Cid]

Hi,

The error you are getting means that Apache can't access the ossec
directory. This
document has a better step by step than the wiki one:

http://www.ossec.net/main/manual/wui-ubuntu/

You need to make sure that you give apache the proper permissions:

*To get the username that Apache is running
root@home:/var/www/ossec# ps auwx |grep apache | cut -d " " -f 1 |
grep -v root | uniq
www-data

*Adding access to the ossec dir:
root@home:/var/www/ossec# usermod -a -G ossec www-data
root@home:/var/www/ossec# cat /etc/group |grep ossec
ossec:x:1001:www-data

*Fixing ./tmp permissions
root@home:/var/www/ossec# chmod 770 tmp/
root@home:/var/www/ossec# chgrp www-data tmp/
root@home:/var/www/ossec# apache2ctl restart

Hope it helps.

--
Daniel B. Cid
dcid ( at ) ossec.net

2009/5/7 yangguyu44944 <yanggu...@163.com>:

[DaSilva]

I still have the error after your commands:

Warning: opendir(/etc/ossec) [function.opendir]: failed to open dir:
Permission denied in /var/www/virtual/domain.de/htdocs/ossec/lib/

os_lib_handle.php on line 94
Unable to access ossec directory.

I am using ispCP with mod_fcgi and Apache 2.2 on Debian Etch.
Do you know another solution?
Thanks in advance

On 8 Mai, 15:32, Daniel Cid <daniel....@gmail.com> wrote:
> Hi,
>
> The error you are getting means that Apache can't access the ossec
> directory. This
> document has a better step by step than the wiki one:
>
> http://www.ossec.net/main/manual/wui-ubuntu/
>
> You need to make sure that you give apache the proper permissions:
>
> *To get the username that Apache is running
> root@home:/var/www/ossec# ps auwx |grep apache | cut -d " " -f 1 |
> grep -v root | uniq
> www-data
>
> *Adding access to the ossec dir:
> root@home:/var/www/ossec# usermod -a -G ossec www-data
> root@home:/var/www/ossec# cat /etc/group |grep ossec
> ossec:x:1001:www-data
>
> *Fixing ./tmp permissions
> root@home:/var/www/ossec# chmod 770 tmp/
> root@home:/var/www/ossec# chgrp www-data tmp/
> root@home:/var/www/ossec# apache2ctl restart
>
> Hope it helps.
>
> --
> Daniel B. Cid
> dcid ( at ) ossec.net
>

> 2009/5/7 yangguyu44944 <yangguyu44...@163.com>:

>
> > Hi ,
> > Sorry to trouble you guys,but I don't have a better way to solve this
> > problem.I followed the instrution "OSSEC Web User Interface (wui) Install" .
> > step 1,I downloaded the
> > ossec-wui-0.3.tar.gz,OSSEC-GPG-KEY.asc,ossec-wui-0.3-checksum.txt,ossec-wui-0.3.tar.gz.gz.
> > step 2,I use the command md5sum instead of md5 which is not available,and
> > I use the sha1sum instead of sha1.Then I get the result:
> > md5sum ossec-wui-0.3.tar.gz
> > c79fa486e9a20fb06a517541033af304 ossec-wui-0.3.tar.gz
> > sha1sum ossec-wui-0.3.tar.gz
> > e00bff680721982ee55295a5292eb4e2a638b820 ossec-wui-0.3.tar.gz
> > step 3, then when I use the gpg --verify ossec-wui-0.3.tar.gz.sig
> > ossec-wui-0.3.tar.gz ,I get the error:
> > ossim:/var/www# gpg --verify ossec-wui-0.3.tar.gz.sig ossec-wui-0.3.tar.gz
> > gpg: no valid OpenPGP data found.
> > gpg: the signature could not be verified.
> > Please remember that the signature file (.sig or .asc)
> > should be the first file given on the command line.
> > step 4,I understand that I need the PGP key.But when I follow the
> > instruction,I still get error.
> > ossim:/var/www# gpg --import OSSEC-GPG-KEY.asc

> > gpg: key 6B30327E: "Daniel B. Cid (Ossec development) <d...@ossec.net>" not