[Os-sim-devel] Re: Comments on Installing OSSIM

[Jan-Oliver W. <ja...@in...>]

Hi David,

[ I am sending this to the devel list now since I 
do not want to bother you alone with my reports ]

only today I found the time to give OSSIM a new try.

[14:05] I am stating with a fresh and clean Debian Sarge as of today.

On Tue, Feb 01, 2005 at 05:31:38PM +0100, David Gil wrote:
> El mié, 26-01-2005 a las 12:49 +0100, Jan-Oliver Wagner escribió:
> > On Tue, Jan 25, 2005 at 03:30:24PM +0100, David Gil wrote:
> > > Please, don't use that manual, it's deprecated. Please use this
> > > (http://www.ossim.net/docs/INSTALL.Debian.quick.txt) instead.
> > 
> > hm. Would be good to take the other stuff offline then.
> 
> Yes, we pretend to update the doc, but in the meantime may be better to
> notice that...
> 
> > > With this manual I hope you can install OSSIM in less than 1 hour.
> > 
> > OK, lets see [12:00] ... ;-)
> > 
> > - here also is missing "apt-get update"
> 
> I think it's obvious..

Well, people not used to use Debian stumble across this. I observed
this multiple times.

I am leaving out the Performance section.

> > - while doing "apt-get install ossim-mysql" I am asked:
> > 
> > | Create the database structure now, using the following commands: 
> > | cd /usr/share/doc/ossim-mysql/contrib/   
> > | zcat create_mysql.sql.gz ossim_*.sql.gz | mysql ossim -p 
> > | zcat create_snort_tbls_mysql.sql.gz \  
> > | create_acid_tbls_mysql.sql.gz  | mysql snort -p  
> > | Use -u and -h mysql options if you need to specify a non-default user
> > | and host. 
> > | After you created the database structure, press 'ok' to continue. 
> > 
> > Unfortunately, /usr/share/doc/ossim-mysql/contrib/ does not exist!
> > (nor does /usr/share/doc/ossim-mysql).
> 
> Mmmm, it's seems that /usr/share/doc/ossim-mysql is created after
> debconf execute... I need to change de debconf template.

the problem is still there.

> Type:
> dpkg -L ossim-mysql

polynoe:~# dpkg -L ossim-mysql
/.
/usr
/usr/share
/usr/share/doc
/usr/share/doc/ossim-mysql
/usr/share/doc/ossim-mysql/contrib
/usr/share/doc/ossim-mysql/contrib/create_mysql.sql.gz
/usr/share/doc/ossim-mysql/contrib/create_pgsql.sql.gz
/usr/share/doc/ossim-mysql/contrib/ossim_config.sql.gz
/usr/share/doc/ossim-mysql/contrib/ossim_data.sql.gz
/usr/share/doc/ossim-mysql/contrib/realsecure.sql.gz
/usr/share/doc/ossim-mysql/contrib/snort_nessus.sql.gz
/usr/share/doc/ossim-mysql/contrib/create_snort_tbls_mysql.sql.gz
/usr/share/doc/ossim-mysql/contrib/096-to-097.sql.gz
/usr/share/doc/ossim-mysql/contrib/097-to-098.sql.gz
/usr/share/doc/ossim-mysql/contrib/create_acid_tbls_mysql.sql.gz
/usr/share/doc/ossim-mysql/changelog.gz
/usr/share/doc/ossim-mysql/INSTALL.gz
/usr/share/doc/ossim-mysql/copyright
/usr/share/doc/ossim-mysql/changelog.Debian.gz


I do not understand the item
"Edit /etc/mysql/my.cnf and modify the "bind-address" entry if you want
MySQL will listen on port TCP-3306 after restart."
so I did not change the file.


apt-get install ossim-server
	There is still the wrong text in one dialog
	which says "enter database"
	but actually a username must be entered.

apt-get install ossim-agent
	prompting 127.0.0.1 and simply saying not to use it
	is a bit vague.
	Better make proposals or explain the situation in
	more detail.

apt-get install ossim-framework
	There is a dialog saying:

	NOTE: Manual configuration required
	You will need to go to http://localhost/acidlab first to force the
	database
	modifications for ACIDlab. It is also advised that you run this
	either over HTTPS or
	with some form of access control on the webserver. We do not
	attempt to install using
	either technique.

	Your installation description should say whether this is important
	for ossim or not.

	However, the command
	lynx  http://localhost/acidlab
	does not work anyway. There seems to be no server listening at
	this point of time.

	oops, and again a dialog asks for database but should for a
	username.

the guide says
"- Edit the phpgacl configuration by hand at
/etc/ossim/framework/ossim.conf.
   Debconf management is incoming.."

but to my opinion the file is configured correctly already.


> > OK, again I will start ignoring ... :-(
> > 
> > - while doing "apt-get install ossim-framework":
> > 
> > |...
> > | Creating config file /etc/apache/modules.conf with new version
> > | 
> > | Setting up ossim-framework (0.9.7+cvs20050125-1) ...
> > | Package `apache' is not installed and no info is available.
> > | Use dpkg --info (= dpkg-deb --info) to examine archive files,
> > | and dpkg --contents (= dpkg-deb --contents) to list their contents.
> > | 
> > | Setting up fontconfig (2.2.3-4) ...
> > |...
> 
> It's fixed in 0.9.8rc1.

confirmed.

> > sounds strange, but I will ignore.
> > 
> > time is [12:22]
> > 
> > - "Go to http://yourhost/phpgacl/setup.php to insert the tables in the
> >       database."
> > 
> > well:
> >  telnet localhost 80
> >  Trying 127.0.0.1...
> >  telnet: Unable to connect to remote host: Connection refused
> > 
> > oh, it is https ...
> > 
> 
> > - doing the "lets get started" (I guess thats what I should do?):
> 
> Once phpgacl is configured, go to http://yourhost/ossim/. You do not
> need to enter to phpgacl admin page..

OK.
Time is now 14:38. Have to stop for some minutes.
15:02 - proceeding.

I entered http://yourhost/ossim/
and first was asked to do something about phpGACL.
I did so and it seemed to be success.
However, the resulting web page says
"*IMPORTANT*

Please make sure you create the <phpGACL root>/admin/templates_c
directory, and give it write permissions for the user your web server
runs as."

But that is already OK, so the hint is superfluous.

> > 	Warning: file(../CREDITS): failed to open stream: No such file or
> > 	directory in /usr/share/phpgacl/admin/about.php on line 73
> > 
> > 	Warning: implode(): Bad arguments. in
> > 	/usr/share/phpgacl/admin/about.php on line 73
> > 	phpGACL
> 
> 
> New phpgacl improvements have been introduced today, can you test with
> the new phpgacl-3.3.4 package?

confirmed to not appear any more.

[15:15] Great, I have now a management interface in my browser running.
Some error messages here and there, but I will look into this later.

> Sorry my poor english.

You english is very good. Thanks for your answers.

Best

	Jan
-- 
Jan-Oliver Wagner               http://intevation.de/~jan/

Intevation GmbH                      http://intevation.de/
FreeGIS                                http://freegis.org/