Results 1 to 7 of 7

Thread: Who knows about Aide

  1. #1
    Join Date
    Apr 2009
    Beans
    7

    Question Who knows about Aide

    What do the community think about Aide? I installed the application for the first time and tried to run it by typing aide --init. I got this message:

    /var/lib/aide/please-dont-call-aide-without-parameters/aide.db.new for writing

    Can anyone interpret this? What did I do wrong? How do I run Aide?

  2. #2
    Join Date
    Jul 2008
    Location
    Helsinki, Finland
    Beans
    97

    Re: Who knows about Aide

    Quote Originally Posted by funkfresh01 View Post
    What do the community think about Aide? I installed the application for the first time and tried to run it by typing aide --init. I got this message:

    /var/lib/aide/please-dont-call-aide-without-parameters/aide.db.new for writing
    How does your aide.conf look like? You first need to set up the configuration file to select which directories/files you want to be put into the AIDE database. Then you run "aide --init".

    It may be that the "database" or "database_out" directives (i.e. the old and new database filenames) in your aide.conf are not properly configured.

  3. #3
    Join Date
    Dec 2005
    Beans
    14

    Re: Who knows about Aide

    No, I've just run into the same thing.

    grepped the config file (/etc/aide.conf) and dirs (/etc/aide.conf.d/*) for the word 'please-dont-call-aide-without-parameters', but couldn't find it.

    Read the README.Debian.gz. No mention of it. Still struggling to configure this after 30mins, should have be done and dusted by now.

    Daftness and fail from upstream I guess

    --
    Ross

  4. #4
    Join Date
    Dec 2005
    Beans
    14

    Re: Who knows about Aide

    This helped...

    http://ubuntuforums.org/archive/inde...t-1096333.html

    This error message, on the other hand, did not (one more time, for the search engines)...

    "Couldn't open file /var/lib/aide/please-dont-call-aide-without-parameters/aide.db for reading"

    WTF! On my list of the top ten daft and misleading error messages ever.

    So, in summary of the original poster's questions...

    > Can anyone interpret this?

    No. Not unless you've either had prior experience of the problem, you're clairvoyant, or you're the developer/packager who designed it to work like that ;^)

    > What did I do wrong?

    You didn't. Like most people wanting to use AIDE, immediately after installing it you wanted to check it was configured and working. You tried to run 'aide --init' to initialise the database as explained in the vast majority of AIDE docs. However, unbeknown to you or me, it seems that you're supposed to wait for the daily cron job to run before you can actually start using AIDE as per the docs. Any attempt to try to use the 'aide' command before this, you get odd/misleading error messages.

    > How do I run Aide?

    After running this, everything should work as per the docs...

    $ sudo /etc/cron.daily/aide

    However, it's still running, so I'm not sure if we're there just yet

    --
    Ross

  5. #5
    Join Date
    Dec 2005
    Beans
    14

    Re: Who knows about Aide

    Ah, while Googling to find where to report this as a problem, I also came across this, which may help explain things...

    http://www.debuntu.org/intrusion-detection-with-aide

  6. #6
    Join Date
    Aug 2006
    Beans
    10

    Re: Who knows about Aide

    Same problem here (Ubuntu 12.10), and doing as explained in the above links did not help.

    However, the following worked out:
    # apt-get install aide
    # aideinit

    Then, instead of "aide --check", you can run:
    # aide.wrapper --check

    All of this should at least be documented. Not saying that it would be better if aide could work as advertized in the documentation, and not only with the help of funny wrappers.

  7. #7
    Join Date
    Jan 2008
    Location
    Manchester UK
    Beans
    13,573
    Distro
    Ubuntu

    Re: Who knows about Aide

    Thanks for the information.

    This thread is old and must be closed.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •