zenity Gtk-WARNING

[Randy Dover]

I apologize in advance!!

 

I know it's been asked, I know it's been answered. However, I can't find it.

 

First. I'm a very unskilled Linux newbie.

Second, I'm very new to Linux! OK, I've said it.  I am installing SO on a VMWare box. I downloaded Ubuntu 12.4 64bit and installed it. I've don the "sudo apt-get -y install securityonion-all" command and it looked successful.

I then ran the "sudo sosetup", I got the "Gtk-WARNING **: cannot open display:" message.

I am not sshing into the console, I am on the VM. I've tried looking the error up, but can't find how to fix it.

 

I saw stuff about if I am ssh into it from a Windows box, which I am not.

 

Again, I apologize, from stuff I've seen when looking it up it seems it has been answered, but I can not find the answer anywhere. Please bear with me and remember I am a newbie.

 

Randy

[Heine Lysemose]

Hi Randy

Please make sure you are following the guide, https://code.google.com/p/security-onion/wiki/Installation#If_you_want_to_quickly_evaluate_Security_Onion_on_your_preferred

Regards,
Lysemose

--
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To post to this group, send email to securit...@googlegroups.com.
Visit this group at http://groups.google.com/group/security-onion?hl=en-US.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Randy Dover]

Heine,

That is exactly the guide I am using.

I get to step

18. Run the Setup wizard (if you get a zenity Gtk-WARNING, then you need to make sure you used "ssh -X" to enable X-Forwarding):

sudo sosetup

 

When I run "sudo sosetup" I get the Gtk-WARNING. The instructions above say if I get it, then I should run the "ssh -X" command, I do, and get a "usage: ssh" screen with a lot of switches listed.

 

Sorry, but I guess I don't know what "make sure you used "ssh -X" to enable X-Forwarding)" means. I figured since I'm on the box and not sshing into it I shouldn't need it.

 

Randy

[Eric Ooi]

Try installing straight from the pre-configured ISO: http://sourceforge.net/projects/security-onion/files/12.04/

Eric

[Randy Dover]

I did that and it worked, but was told by a buddy in the industry it was best if I downloaded Ubuntu and the installed SO on it.

 

I'd rather do that, so would like to see if someone could answer the question. I'm sure I'm just missing something, and it's probably something quite small.

 

Randy

[Eric Ooi]

What was your buddy's reasoning?  The ISO is effectively Ubuntu with SO installed so you don't run into the very errors you're experiencing.

[Randy Dover]

I don't remember. I could find his email, but he stated that it was best for some reasons.

[Karolis]

Install Ubuntu Desktop on the second machine, open terminal in it and run  "ssh -X ip.of.your.sensor"  then follow the guide....

Karolis

[Eric Ooi]

There really isn't any reason to not use the ISO unless you don't want certain packages installed.  Similar to what Karolis said, I'm guessing your installation is a headless server-only installation of Ubuntu with no GUI?  If so, you'll need to either install the desktop interface on the machine or follow Karolis' suggestion and stand up a separate machine.

Or...use the ISO :)

[Randy Dover]

Karolis,

I am wanting to install the server, not a sensor, but I think I know what you mean...

I did the "ssh -x ip.of.my.server". Then I ran sudo sosetup on the local box (the vm with I installed Ubuntu and and trying to install SO on) and I also ran it from the remote box (from where I ran the "ssh -x ip.of.my.server".) Both times I got the "Gtk-WARNING".

 

when I did the "ssh -x ip.of.my.server" I had to enter credentials, so I know I did that part right. Then the prompt showed user@ myserver:~$ prompt.

 

Randy

On Wed, May 1, 2013 at 3:12 PM, Karolis <karolis...@gmail.com> wrote:

[Randy Dover]

I think that is why he suggested not using the ISO, because there are some issues with ELSA and it having to be constantly updated / tweaked.

 

You may have the answer, though. I don't have the GUI installed. How can I install that? There aren't instructions for that in the SO instructions, or should I have done it differently when installing Ubuntu? Should I do Ubuntu server or desktop? Best 32-bit or 64-bit?

 

Thanks,

Randy

[Eric Ooi]

If ELSA was the only concern, that really isn't a strong reason to not use the ISO.  Because when you run "sudo setup" you are given the option to enable or disable ELSA, in your case you'd just select disable and you wouldn't have to worry about those packages at all.  Seriously, use the ISO.  In fact, prior to the 64bit version, the only way to install SO was via the ISO.  The option of installing your own version of linux and then adding the packages, etc is more for advanced users which you have admitted you are not.  You could be monitoring your network right now rather than being on step 0 of choosing which flavor of linux to use and asking how to install Linux.  You now run the risk of installing packages or configuring things that you are not familiar with.  However, if your goal is to learn the joys of installing and configuring Linux at the same time, well then have it! :)

/rant

All that said, if you're still adamant about doing it yourself, google is your friend: http://www.ubuntugeek.com/how-to-install-gui-on-ubuntu-12-04-precise-server.html

[Karolis]

try capital X "ssh -X ip"

Karolis

[Matt Gregory]

I did the "ssh -x ip.of.my.server". Then I ran sudo sosetup on the local box (the vm with I installed Ubuntu and and trying to install SO on) and I also ran it from the remote box (from where I ran the "ssh -x ip.of.my.server".) Both times I got the "Gtk-WARNING".

 

Make sure when you SSH into the SO box you use a capital "X" to forward your X session, i.e., "ssh -X ip.of.my.server".  Also, the machine from which you are SSH'ing must support X windows, such as Mac OS X or a GUI Linux distro.  You can also SSH from a Windows box if you install xming or something similar first and your Windows SSH client also supports X forwarding (I know PuTTY has this option).

 

There really is a good reason not to use the pre-built ISO, and that's if you want to run a headless sensor or server and don't need the GUI desktop, which in turn is easier on system resources.  Once you install Ubuntu 12.04 Server (for both the SO server and sensors), just follow the SO installation instructions on the Wiki.  There's nothing wrong at all with using the ISO, it just depends on your particular requirements.

 

Matt

[Eric Ooi]

Headless setup would indeed be another good reason.  In terms of quickest install for an inexperienced user, ISO is probably easiest.

[Ayodele Okeowo]

I found a little quick fix to this. On your SO server itself, run 'sudo apt-get install xinit" once the install has completed then run 'sudo xinit' or 'sudo startx'. Your screen will change then go ahead and run 'sosetup'

That should do the trick rather than trying to modify your SO server.

[Jagat Kalathia]

If you installed a GUI, login using the username/password you specified in the Ubuntu installer. If you installed Ubuntu Server (no GUI), you'll want to SSH into your new installation from another machine (with an X server) using the -X option to enable X-Forwarding:

you can use this http://mobaxterm.mobatek.net/