5.4 Installing Nsure Audit on Linux

  1. Log in as root on the host.

  2. Enter the following command from the Linux console:

    On SUSE, mount /media/cdrom

    On RedHat, mount /mnt/cdrom

  3. Enter the following command from the Linux console:

    On SUSE, cd /media/cdrom/Linux

    On RedHat, cd /mnt/cdrom/Linux

  4. You are now in the setup directory for the Nsure Audit Linux install. Enter the following command from the Linux console to begin the installation:

    ./pinstall.lin

    The pinstall.lin script performs the following actions:

    • Verifies that eDirectory for Linux has been installed.
    • Copies the Novell Nsure Audit files to the installation directory.
    • Starts the auditext.sh script.

    If you receive a Permission Denied error when attempting to execute the install script, you might need to grant execute rights to pinstall.lin by running chmod 755 pinstall.lin.

  5. When prompted, accept the license agreement.

  6. Select your install options.

    • Platform Agent: Installs the Novell Nsure Audit Platform Agent.
    • eDirectory Instrumentation Files and Platform Agent: Installs the eDirectory Instrumentation and Platform Agent.
    • Secure Logging Server and Platform Agent: Installs the Novell Nsure Audit Secure Logging Server.
    • All: Installs the Secure Logging Server, Platform Agent, and the eDirectory instrumentation.

  7. After the Nsure Audit components are installed, the auditext utility is automatically launched to extend your eDirectory schema, and configure the default Nsure Audit objects.

    In auditext, run Add Schema Extensions if you are performing a new install or an upgrade, then run Configure Server if you are performing a new install.

    If prompted, enter the Directory administrator's login name and password to update the schema.

    IMPORTANT:This account must have admin rights to the root of the tree.

    If the admin object is not in the same context as the current server, you must enter the object's fully distinguished name (for example, .Admin.Accounts.Finance.YourCo).

  8. If prompted, enter a name for the Secure Logging Server object.

  9. Continue to follow the installation instructions on the screen until you have exited the Novell Nsure Audit installation program.

When the installation is complete, the Secure Logging Server automatically launches, and the following command is added to /usr/lib/nds-modules/ndsmodules.conf to automatically load the eDirectory instrumentation with eDirectory:

auditds auto #NSure Audit Platform Agent

Remove this command if you do not want the eDirectory instrumentation to automatically load.

To manually start the eDirectory instrumentation, enter:

start ndstrace -c “load auditds”