How to install InTrust 11.x Agent on Red Hat Enterprise Linux 6 or 7 (4236460)

InTrust 11 added support for InTrust Agents running on Red Hat Enterprise Linux 7, 6.6, 6.5, 6.4, 6.3, 5, 4

To prepare a Linux Red Hat 6 or 7 host, several C++ libraries must be installed

Once installed, install the InTrust Agent manually and adjust the configuration of the Syslog flavor used

InTrust takes advantage of the Syslog logging system on Linux computers

Syslog provides data for auditing and real-time monitoring activities

Syslog functionality is provided by the syslogd daemon, which accepts messages from various sources that support logging, and either writes these messages to files or passes them on to other hosts in the network

On Red Hat 6 and 7, RSyslog must send event stream to Syslog for InTrust Agent processing

1. Mount the RHEL install DVD
   • mkdir -p /mnt/RHEL
   • mount -t iso9660 /dev/cdrom /mnt/RHEL
2. Make a Yum repository which uses the DVD as a repository
   • /etc/yum.repos.d/rhel-dvd.repo
   • [rhel-dvd]
   • name=Red Hat Enterprise Linux $releasever - $basearch - DVD
   • baseurl=file:///mnt/RHEL/
   • enabled=1
   • gpgcheck=0
3. Install the glibc.i686 package which will install two packages : nss-softokn-freebl-3.12.9-11.el6.i686 and glibc-2.12-1.107.el6.i686
   • yum install glibc.i686
4. Install the libuuid.i686 package
   • yum install libuuid.i686
5. Configure Syslog as per InTrust_11.0_AuditingMonitoringLinux.pdf
   1. Create the /etc/syslog.conf file
      • touch /etc/syslog.conf
   2. In the /etc/rsyslog.conf file, add the following lines (NOTE: There is no space between | and /var)
      • #### RULES ####
      • *.debug |/var/log/intrust_syslog;RSYSLOG_TraditionalFileFormat
   3. Create the /var/log/intrust_syslog pipe
      • mkfifo /var/log/intrust_syslog
   4. Restart the rsyslogd daemon using the following command sequence
      1. For RedHat 6.3 to 6.6
         • /etc/rc.d/rc2.d/S12rsyslog stop
         • /etc/rc.d/rc2.d/S12rsyslog start
      2. For RedHat 7
         • systemctl restart rsyslog
6. Copy the InTrust Agent install script to /opt/InTrust and set security (be sure to use BIN mode if using FTP)
   • chmod 555 adcscm_package.linux_intel.sh
7. Install the Agent using the script
   • ./adcscm_package.linux_intel.sh
   • Set Base path to /opt/InTrust
8. InTrust Agent should now be running - this can confirmed with the following command
   • /etc/init.d/adcscm.linux_intel status
9. Register the InTrust Agent to InTrust server(s)
   • ./adcscm -add InTrustServerName 900