[osiris] Osiris not resetting base database

Jeff Simmons jsimmons at goblin.punk.net
Tue Nov 14 16:23:37 EST 2006


Hello, list.

I've set up Osiris 4.2.2 on an OpenBSD 3.9 box, and it's working except for 
the fact that it doesn't reset the base database after a change, so any 
change is reported for all subsequent scans, even though auto accept is set 
to yes. Any way I can change this?

osiris-4.2.2-release: host-details charon

[ host details for: (charon) ]

  enabled          : yes
  hostname/IP      : 127.0.0.1
  configs          : 0
  databases        : 1
  host type        : generic
  log files        : no
  archive scans    : no
  auto accept      : yes
  purge databases  : yes
  notify enabled   : yes
  notify always    : yes
  notify on rekey  : yes
  notify scan fail : yes
  notify email     : (management config)
  scans start      : Wed Nov 15 02:15:00 2006
  scan period      : every 1440 minutes
  base DB          : 1
  agent port       : 2265
  description      : osiris server

osiris-4.2.2-release: start-scan charon
 >>> scanning process was started on host: charon

osiris-4.2.2-release: list-db charon
This may take a while...

  [ name ]                        [ created ]

  * 1                               Tue Nov 14 12:50:38
    2                               Tue Nov 14 12:52:45

total: 2
(*) denotes the base database for this host.

## Create a new file in the /bin directory

osiris-4.2.2-release: start-scan charon
 >>> scanning process was started on host: charon

osiris-4.2.2-release: list-db charon
This may take a while...

  [ name ]                        [ created ]

  * 1                               Tue Nov 14 12:50:38
    2                               Tue Nov 14 12:53:57

total: 2
(*) denotes the base database for this host.

## Email notification finds the new file in /bin, but doesn't change the base 
database.  Create a second new file in /bin

osiris-4.2.2-release: start-scan charon
 >>> scanning process was started on host: charon

osiris-4.2.2-release: list-db charon
This may take a while...

  [ name ]                        [ created ]

  * 1                               Tue Nov 14 12:50:38
    2                               Tue Nov 14 12:55:26

total: 2
(*) denotes the base database for this host.

## Both new files are reported via email, but the base database still hasn't 
changed.

It's going to be a real pain to use Osiris if I have to manually reset the 
base database for 40 or so computers every day ...    :-( 

-- 
Jeff Simmons                                   jsimmons at goblin.punk.net
Simmons Consulting - Network Engineering, Administration, Security
"You guys, I don't hear any noise. Are you sure you're doing it right?"
	--My Life With The Thrill Kill Kult



More information about the osiris mailing list