Host Intrusion Detection System Administrator's Guide Release 3.0
System Manager Screen
Starting HP-UX HIDS Agents
Chapter 4
52
Starting HP-UX HIDS Agents
Normally (after valid certificates have been imported), the HP-UX HIDS agent is started
automatically (with /sbin/init.d/idsagent start) when the agent host is booted. To
start it manually, use this procedure.
To start the agent
Step 1. On each agent host, do one of:
• Log in to the agent system as superuser (root) and enter the command:
# /sbin/init.d/idsagent start
This starts /opt/ids/bin/idsagent under user ids and activates any schedule that
was retained when the agent halted.
• Log in to the agent system as user root, switch to user ids, and enter the command:
$ /opt/ids/bin/idsagent -a
This starts /opt/ids/bin/idsagent under user ids and activates any schedule that
was retained when the agent halted.
• Log in to the agent system as user root, switch to user ids, and enter the command:
$ /opt/ids/bin/idsagent
This starts /opt/ids/bin/idsagent under user ids and does not activate any
schedule that was retained when the agent halted.
Once it has started, idsagent executes in the background as a daemon process on the
host system, awaiting commands from the System Manager via an SSL connection.
If another agent is running, idsagent fails with the message:
idsagent: another idsagent (PID:
pid
) process is running
Or a stale lockfile /var/opt/ids/idsagent.pid exists
Remove it and attempt to restart - exiting
If no idsagent is running, delete /var/opt/ids/idsagent.pid and restart idsagent.
If the lock file, /var/opt/ids/idsagent.pid, exists and there is no agent running, the
new idsagent runs and resets the lock file, displaying the message:
idsagent: possibly stale lockfile /var/opt/ids/idsagent.pid - unlinking