Samhain | ||
---|---|---|
<<< Previous | Configuration — yule, the log server | Next >>> |
As noted above, clients must be registered with yule to make a connection. The respective section in the configuration file looks like:
[Clients] # # A client # Client=HOSTNAME_CLIENT1@salt1@verifier1 # # another one # Client=HOSTNAME_CLIENT2@salt2@verifier2 # |
The entries have to be computed in the following way:
Choose a password (16 chars hexadecimal, i.e. only 0 -- 9, a -- f, A -- F allowed. To generate a random password, you may use:
yule --gen-password
Use the program samhain_setpwd to reset the password in the compiled client binary (that is, samhain, not yule) to the one you have chosen. Running samhain_setpwd without arguments will print out exhaustive usage information.
Use the server's convenience function to create a registration entry:
yule -P password
The output will look like:
Client=HOSTNAME@salt@verifier
You now have to replace HOSTNAME with the fully qualified domain name of the host on which the client should run.
Put the registration entry into the servers's configuration file, under the section heading Clients (see the Section called Client registry>). You need to send SIGHUP to the server for the new entry to take effect.
Repeat steps (1) -- (5) for any number of clients you need (actually, you need a registration entry for each client's host, but you don't neccesarily need different passwords for each client. I.e. you may skip steps (1) -- (3)).
If you have a default directory layout, a Clients section right at the end of the server config file, and your client is client.mydomain.com, then you could e.g. do:
bash$ PASSWD=`yule --gen-password` bash$ samhain_setpwd samhain new $PASSWD bash$ scp samhain.new root@client.mydomain.com:/usr/local/sbin/samhain bash$ ENTRY=`yule -P $PASSWD | sed s%HOSTNAME%client.mydomain.com%` bash$ echo $ENTRY >> /etc/yulerc bash$ kill -HUP `cat /var/run/yule.pid` |
<<< Previous | Home | Next >>> |
Chroot | Up | Enabling logging to the server |