HIDS - no agent available

[maxell_1]

hi

Need help on configuring HIDS. Have configured two integrity servers. One as a client and another the server.

Always getting "no agent available" in the status field in the idsgui.

Have checked the validity of the keys and certs. Also have sync the date/time of both machines.

Please help. Thanks

[rariasn · Accepted solution]

Hi,

Verify in client.

Restart ids agent:

# /sbin/init.d/idsagent stop

# /sbin/init.d/idsaget start

# ps -fu ids

Server:

Verify status of client.

rgs,

[maxell_1]

hi, yes I did try to restart idsagent but it gave the same result. Thanks

[Viktor Balogh]

troubleshooting guide:

http://docs.hp.com/en/5991-1162/apgs02.html#cacjhecj

[maxell_1]

hi thanks for the troubleshooting guide. Yes I did try all the recommended steps in the guide like; ping, ensure hostname are updated, certs are valid, keys are valid, restart the idsagent ... But still getting the same error.

Please shine some light. Appreciated. Thanks.

[Viktor Balogh]

Did you set up the client/server according to the manual? Run over these steps and check if anything is configured correctly. Do you notice anything in the logs regarding HIDS? (client/server?)

[rariasn]

Hi Maxell:


Connect to client and verify the next file:

/var/opt/ids/error.log

Verify actives ids proccess:

# ps -fu ids

Sample output:

ids 11997 1 0 03:44:44 0:56 ? ./idsagent -a
ids 12014 11997 0 03:44:47 ? 0:54 idskerndsp -c 301101 -o /var/opt/ids//ids_1000 -s 29130813 -q 6
ids 12013 11997 0 03:44:47 ? 0:22 idscor -i /var/opt/ids//ids_1000 -o 451589 -c 430087 -s 4415530

rgs,