topic AIDE and libmhash problem in Operating System - HP-UX

AIDE and libmhash problem

Felix Maurer — Wed, 04 Dec 2002 14:22:33 GMT

Has anyone been able to install AIDE (Advanced Intrusion Detection Environment) on hpux 11.x. I am stuck on the configure phase:

# ./configure --with-zlib="/usr/zlib/include" --with-mhash="/usr/local/lib"
...
checking for mhash_get_block_size in -lmhash... no
You must have libmhash properly installed.

It then breaks.

I have installed mhash without any trouble, and it can be found at the mentioned location:

# hpieeg # ls /usr/local/lib
X11 libgd.sl libmhash.sl libttf.a
libXpm.a libjpeg.a libmhash.sl.2 libttf.la
libXpm.sl libjpeg.la libmhash.sl.2.0 libttf.sl
libcrypto.a libjpeg.sl libpng.a libz.a
libfl.a libmhash.a libpng.sl libz.sl
libgd.a libmhash.la libssl.a netscape

Any idea?

Re: AIDE and libmhash problem

Steve Steel — Wed, 04 Dec 2002 14:33:47 GMT

Hi

If you google the message it would seem to be a compiler problem.
http://www.mail-archive.com/aide@cs.tut.fi/msg00113.html

Regards

Steve Steel

Quote of the moment
-------------------
"We are drowning in information but starved for knowledge."
-- John Naisbitt

Re: AIDE and libmhash problem

Felix Maurer — Wed, 04 Dec 2002 14:43:04 GMT

Hello,

This may have been a problem on Solaris 2.6, but this is rather old (currently Solaris 8 or even 9). I have no problem to install on the current Solaris version.

So it must be something else?

Re: AIDE and libmhash problem

Steve Steel — Wed, 04 Dec 2002 15:05:50 GMT

Hi

It is either your command or your compiler

By typing ./configure --help, we get a list of the available compilation options, from installation directories to additional libraries. In this manner, we determine the correct command option for making use of the just-installed mhash library.

Try adding lib directory to path and
try configure with the following extra parameters

--with-extra-libs=-L/usr/local/lib
--with-extra-includes=-I/usr/local/include
Regards

Steve Steel

Quote of the moment
-------------------
"We are drowning in information but starved for knowledge."
-- John Naisbitt

Re: AIDE and libmhash problem

Felix Maurer — Thu, 05 Dec 2002 09:16:03 GMT

Hi Steve,

Thanks a lot for your help. Your hint helped me futher, I'm now been able to run the configure command without any error, I have added both qualifiers:

./configure --with-zlib="/usr/zlib/include" --with-extra-libs=-L/usr/local/lib --with-extra-includes=-I/usr/local/include

I now have problem at the make stage

gcc -static -L/usr/local/lib -static -o aide conf_yacc.o conf_lex.o getopt.o getopt1.o gnu_regex.o error.o md.o db.o commandconf.o db_file.o db_disk.o db_lex.o db_sql.o gen_list.o list.o do_md.o base64.o symboltable.o compare_db.o be.o util.o aide.o -lmhash
/usr/bin/ld: Unsatisfied symbols:
vsyslog (code)
collect2: ld returned 1 exit status
*** Error exit code 1

Stop.
*** Error exit code 1

Stop.
*** Error exit code 1

Stop.

I'm looking now further to make it running

Felix

Re: AIDE and libmhash problem

Felix Maurer — Thu, 05 Dec 2002 10:55:10 GMT

If know a bit more about the mentionned error. If I comment the following line in src/error.c, it make is ok:

#ifdef HAVE_SYSLOG
if(conf->initial_report_url->type==url_syslog){
/* vsyslog(SYSLOG_PRIORITY,error_msg,ap); */
va_end(ap);
return;

I suppose that this syslog priority is for some reason not defined on my system. The question is how can I define it? Maybe in /etc/syslog.conf?

Felix