Index: trunk/docs/HOWTO-samhain-on-windows.html =================================================================== --- trunk/docs/HOWTO-samhain-on-windows.html (revision 591) +++ trunk/docs/HOWTO-samhain-on-windows.html (revision 1) @@ -135,6 +135,5 @@ Cygwin POSIX emulation layer, and how to install it as a service. These instructions have been written by Kris Dom, -who has tested this on WinXP Professional, with additions by Geries Handal -and Jorge Morgado. +who has tested this on WinXP Professional.

@@ -151,6 +150,5 @@ logging) because Interix does not provide some of the required functionality to build the email module. This issue should be fixed as of samhain -version 2.0.7 (not tested).
-[Based on information kindly provided by Geries Handal]. +version 2.0.7 (not tested).
[Based on information kindly provided by Geries Handal].

@@ -194,21 +192,4 @@ -
-

-You don't need to download and install All packages. It is enough to keep -the Default and then add the following additional packages: -

-

- Category Devel -> gcc: C compiler upgrade helper
- Category Devel -> make: The GNU version of the 'make' utility
- Category Libs -> minires: A simple synchronous non caching stub resolver
-

-

-When selecting these packages, Cygwin installer will automatically add -other packages based on their dependencies. -The package minires is only necessary for a minimal Cygwin installation -(below). [Kindly pointed out by Jorge Morgado]. -

-

Cygwin installation

@@ -273,12 +254,4 @@
  • Configure:
       $ ./configure --enable-xml-log=yes --with-tmp-dir=/usr/local/tmp --with-config-file=/usr/local/etc/samhainrc --with-log-file=/usr/local/log/samhain.log --with-pid-file=/usr/local/var/samhain.pid --with-state-dir=/usr/local/var
    -
    -

    -In my experience, the paths given in the 'configure' command should refer to -the Cygwin filesystem view, i.e. /cygdrive/c/..., otherwise -samhain may not work from a pure DOS shell, and may not run as a Windows -service [Rainer Wichmann]. -

    -
  • Make the binary:
    @@ -328,28 +301,4 @@
    • - -
  • -Files needed from c:\Cygwin\bin to create the /etc/passwd and /etc/group files: - -

    -To generate these files on a minimal Cygwin installation execute - on a -Windows Command Prompt: -

    -   mkdir c:\etc
    -   path\to\mkpasswd.exe -l > c:\etc\passwd
    -   path\to\mkgroup.exe -l > c:\etc\group -

    -IMPORTANT NOTE: You should re-create these two files, each time the -Windows users and groups accounts database changes. Failing to do this -might generate critical log messages (depending on your configuration -file). -

  • @@ -382,6 +331,6 @@
  • Under the newly created "Parameters" key, add a new String - value called "Application".
    -    The value for "Application" + value called "Applications".
    +    The value for "Applications" should be "c:\usr\local\sbin\samhain.exe".
    • @@ -399,28 +348,4 @@ -
    -

    -It seems that start/stop/restart the service does not work if samhain -is configured to run as a daemon, because the Windows service manager -cannot track the forked daemon process. -

    -

    Therefore, if you run Samhain as a Windows service, it might be better -to configure it as a 'normal' process which does not fork a daemon: -

    -[Rainer Wichmann]. -

    -
    -

    -Also see http://support.microsoft.com/kb/q137890/ for information regarding the creation of a -user-defined service. -

    Note: the first time I tried to install samhain as an NT service, I first @@ -429,67 +354,4 @@ Samhain as a service.

    - - -

    Troubleshooting samhain

    - -

    -[Rainer Wichmann] I had some problems at first getting it to run as a -Windows service. Some tips: -

    -

    - -

    -[Tip from Jorge Morgado] If you, like me, have a Windows server not part of any domain and (for -security reasons) you even turn off DNS resolution, you might probably get -the following error when initializing the baseline database: -

    -
    -  ---------   sh_unix.c  ---   1487 ---------
-  According to uname, your nodename is yourcomputername, but your resolver
-  library cannot resolve this nodename to a FQDN.
-  Rather, it resolves this to yourcomputername.
-  For more information, see the entry about self-resolving under
-  'Most frequently' in the FAQ that you will find in the docs/ subdirectory
-  ----------------------------------------------
-
    -

    -To fix this problem open the Registry Editor and create the following -entries under the key -HKLM\System\CurrentControlSet\Services\Tcpip\Parameters -

    -

    - -Name: Domain
    -Type: REG_SZ
    -Data: your.domain.name -     -

    - -Name: NV Domain
    -Type: REG_SZ
    -Data: your.domain.name -     -

    -The NV Domain registry value contains the computer's primary DNS suffix -while the Domain registry value contains the computer's primary DNS -domain. This will make the warning message go away. -