Agent installation error

618 views
Skip to first unread message

Paul

unread,
May 10, 2016, 11:55:37 AM5/10/16
to ossec-list
I am attempting to install the package ossec-hids-agent onto Ubuntu 14.04.4.
I am using the source, deb http://ossec.wazuh.com/repos/apt/ubuntu trusty main

While installing it is kicking the error 
     Setting up ossec-hids-agent (2.8.3-3trusty) ...
     chown: invalid user: ‘ossec:ossec’
     dpkg: error processing package ossec-hids-agent (--configure):
      subprocess installed post-installation script returned error exit status 1

When I look at /etc/passwd I do not see an entry for ossec; and I could not find any documentation stating I needed to create one when dealing with the repository.

Am I missing something?

Thank you for any help

Alexandre Laquerre

unread,
May 10, 2016, 11:58:31 AM5/10/16
to ossec-list
Hi,

when you do a ls -la on the installation file what permissions do you see ?

cheers,

Paul

unread,
May 10, 2016, 12:09:27 PM5/10/16
to ossec-list
-rw-r--r-- 1 root root 206422 Nov 12 21:11 /var/cache/apt/archives/ossec-hids-agent_2.8.3-3trusty_amd64.deb

Also, if it matters, I did the apt-get as root.

Alexandre Laquerre

unread,
May 10, 2016, 12:30:29 PM5/10/16
to ossec-list
hmm after a bit of searching, i found the following details in a previous post from April


The suggestion in that post was to create a user in order to solve the issue. It is as if the user is the user ossec is the default user for Ossec and without it, it will not install.

Alexandre Laquerre

unread,
May 10, 2016, 12:50:00 PM5/10/16
to ossec-list
You are installing the installation package with a root like user correct ?

Santiago Bassett

unread,
May 10, 2016, 1:16:07 PM5/10/16
to ossec...@googlegroups.com
Do you have adduser binary? Try running it manually. I need to add it as a package dependency, as it seems not every Debian/Ubuntu has it.

If you don't try installing it and then reinstall OSSEC, that should work. 

I hope it helps

--

---
You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ossec-list+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Paul

unread,
May 10, 2016, 1:41:00 PM5/10/16
to ossec-list
Correct. I am sudo -i
Currently, half seems to thing the user is installed, and half does not.
Also, the group is already there in /etc/group ossec:x:118:
Once I created the user; I reinstalled and things seem to have went smoothly this time.
Thanks for your help with this!

Paul

unread,
May 10, 2016, 1:58:51 PM5/10/16
to ossec-list
Yes, I had the adduser binary.
Reply all
Reply to author
Forward
0 new messages