Hi list ! I have a problem to start syslog-ng. I got a syntax error on line in bold : ###### # sources # all known message sources source s_all { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); }; source s_unix { tcp( port(514) * tls(* key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") ca_dir("/etc/syslog-ng/certs/CA/") peer_verify(optional-untrusted) ) ); }; But I can't figure out what ! Can someone point this error to me ? Thanks -- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40 -------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com -------------------------------------------------------------------------------- This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
Its a dash in the 'peer-verify' not underscore as 'peer_verify'. See if that solves it. -Patrick Sent: Wed Jan 19 2011 01:31:36 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Error starting syslog-ng
Hi list !
I have a problem to start syslog-ng. I got a syntax error on line in bold :
###### # sources
# all known message sources source s_all { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); };
source s_unix { tcp( port(514) * tls(* key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") ca_dir("/etc/syslog-ng/certs/CA/") peer_verify(optional-untrusted) ) ); };
But I can't figure out what !
Can someone point this error to me ?
Thanks -- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
I am pretty sure it is an underscore. But I tried and neither dash nor underscore solve my problem. On 01/19/2011 05:03 PM, Patrick H. wrote:
Its a dash in the 'peer-verify' not underscore as 'peer_verify'. See if that solves it.
-Patrick
Sent: Wed Jan 19 2011 01:31:36 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Error starting syslog-ng
Hi list !
I have a problem to start syslog-ng. I got a syntax error on line in bold :
###### # sources
# all known message sources source s_all { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); };
source s_unix { tcp( port(514) * tls(* key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") ca_dir("/etc/syslog-ng/certs/CA/") peer_verify(optional-untrusted) ) ); };
But I can't figure out what !
Can someone point this error to me ?
Thanks -- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40 -------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com -------------------------------------------------------------------------------- This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
Hrm, when I looked at the docs I was seeing dash, however I looked through some more and I see both dash and underscore. Doc bug? Anyway I cant see anything else wrong with it :-/ -Patrick Sent: Wed Jan 19 2011 09:09:33 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] Error starting syslog-ng
I am pretty sure it is an underscore. But I tried and neither dash nor underscore solve my problem.
On 01/19/2011 05:03 PM, Patrick H. wrote:
Its a dash in the 'peer-verify' not underscore as 'peer_verify'. See if that solves it.
-Patrick
Sent: Wed Jan 19 2011 01:31:36 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Error starting syslog-ng
Hi list !
I have a problem to start syslog-ng. I got a syntax error on line in bold :
###### # sources
# all known message sources source s_all { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); };
source s_unix { tcp( port(514) * tls(* key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") ca_dir("/etc/syslog-ng/certs/CA/") peer_verify(optional-untrusted) ) ); };
But I can't figure out what !
Can someone point this error to me ?
Thanks -- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
Actually, what version of syslog-ng are you using? According to the docs, tls was only available in the premium edition until 3.0. So if youre using something older, that might be why. -Patrick Sent: Wed Jan 19 2011 09:19:55 GMT-0700 (Mountain Standard Time) From: Patrick H. <syslogng@feystorm.net> To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Error starting syslog-ng
Hrm, when I looked at the docs I was seeing dash, however I looked through some more and I see both dash and underscore. Doc bug?
Anyway I cant see anything else wrong with it :-/
-Patrick
Sent: Wed Jan 19 2011 09:09:33 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] Error starting syslog-ng
I am pretty sure it is an underscore. But I tried and neither dash nor underscore solve my problem.
On 01/19/2011 05:03 PM, Patrick H. wrote:
Its a dash in the 'peer-verify' not underscore as 'peer_verify'. See if that solves it.
-Patrick
Sent: Wed Jan 19 2011 01:31:36 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Error starting syslog-ng
Hi list !
I have a problem to start syslog-ng. I got a syntax error on line in bold :
###### # sources
# all known message sources source s_all { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); };
source s_unix { tcp( port(514) * tls(* key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") ca_dir("/etc/syslog-ng/certs/CA/") peer_verify(optional-untrusted) ) ); };
But I can't figure out what !
Can someone point this error to me ?
Thanks -- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
------------------------------------------------------------------------
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
I am using syslog-ng 2.0.9 I don't know why this config doesn't work. It was working on the very same box before a re-installation. Base system is the same : Debian Lenny. syslog-ng is the latest available in the repos. Thanks for your help On 01/19/2011 05:22 PM, Patrick H. wrote:
Actually, what version of syslog-ng are you using? According to the docs, tls was only available in the premium edition until 3.0. So if youre using something older, that might be why.
-Patrick
Sent: Wed Jan 19 2011 09:19:55 GMT-0700 (Mountain Standard Time) From: Patrick H. <syslogng@feystorm.net> To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Error starting syslog-ng
Hrm, when I looked at the docs I was seeing dash, however I looked through some more and I see both dash and underscore. Doc bug?
Anyway I cant see anything else wrong with it :-/
-Patrick
Sent: Wed Jan 19 2011 09:09:33 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] Error starting syslog-ng
I am pretty sure it is an underscore. But I tried and neither dash nor underscore solve my problem.
On 01/19/2011 05:03 PM, Patrick H. wrote:
Its a dash in the 'peer-verify' not underscore as 'peer_verify'. See if that solves it.
-Patrick
Sent: Wed Jan 19 2011 01:31:36 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Error starting syslog-ng
Hi list !
I have a problem to start syslog-ng. I got a syntax error on line in bold :
###### # sources
# all known message sources source s_all { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); };
source s_unix { tcp( port(514) * tls(* key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") ca_dir("/etc/syslog-ng/certs/CA/") peer_verify(optional-untrusted) ) ); };
But I can't figure out what !
Can someone point this error to me ?
Thanks -- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40 -------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com -------------------------------------------------------------------------------- This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
As Patrick mentioned, TLS support is not available in version 2.0.9 of syslog-ng Open Source Edition, only in the commercial version. If this config was used earlier on this box before the reinstall, then a newer version of syslog-ng must have been installed on it. Download a newer version of syslog-ng Open Source Edition (at least 3.0, but newer is recommended) and install it on the box, then TLS support will work. You can download a package from the BalaBit website at http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/... or check the packages.debian.org site. @Patrick: In option names syslog-ng treats dashes and underscores identically, it does not matter which one you use. Regards, Robert On Wednesday, January 19, 2011 17:36 CET, Fabien Bagard <fabien.bagard@parrot.com> wrote:
I am using syslog-ng 2.0.9
I don't know why this config doesn't work.
It was working on the very same box before a re-installation. Base system is the same : Debian Lenny. syslog-ng is the latest available in the repos.
Thanks for your help
On 01/19/2011 05:22 PM, Patrick H. wrote:
Actually, what version of syslog-ng are you using? According to the docs, tls was only available in the premium edition until 3.0. So if youre using something older, that might be why.
-Patrick
Sent: Wed Jan 19 2011 09:19:55 GMT-0700 (Mountain Standard Time) From: Patrick H. <syslogng@feystorm.net> To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Error starting syslog-ng
Hrm, when I looked at the docs I was seeing dash, however I looked through some more and I see both dash and underscore. Doc bug?
Anyway I cant see anything else wrong with it :-/
-Patrick
Sent: Wed Jan 19 2011 09:09:33 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] Error starting syslog-ng
I am pretty sure it is an underscore. But I tried and neither dash nor underscore solve my problem.
On 01/19/2011 05:03 PM, Patrick H. wrote:
Its a dash in the 'peer-verify' not underscore as 'peer_verify'. See if that solves it.
-Patrick
Sent: Wed Jan 19 2011 01:31:36 GMT-0700 (Mountain Standard Time) From: Fabien Bagard <fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Error starting syslog-ng
Hi list !
I have a problem to start syslog-ng. I got a syntax error on line in bold :
###### # sources
# all known message sources source s_all { # message generated by Syslog-NG internal(); # standard Linux log source (this is the default place for the syslog() # function to send logs to) unix-stream("/dev/log"); # messages from the kernel file("/proc/kmsg" log_prefix("kernel: ")); };
source s_unix { tcp( port(514) * tls(* key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") ca_dir("/etc/syslog-ng/certs/CA/") peer_verify(optional-untrusted) ) ); };
But I can't figure out what !
Can someone point this error to me ?
Thanks -- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
Sent: Wed Jan 19 2011 12:08:01 GMT-0700 (Mountain Standard Time) From: Fekete Róbert <frobert@balabit.hu> To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Error starting syslog-ng
@Patrick: In option names syslog-ng treats dashes and underscores identically, it does not matter which one you use. Thanks! I did not know this, but good to know :-)
-Patrick
You were right, The previous box was not running lenny but squeeze, which provides v 3.1.3 Thank you On 01/19/2011 08:08 PM, Fekete Róbert wrote:
As Patrick mentioned, TLS support is not available in version 2.0.9 of syslog-ng Open Source Edition, only in the commercial version. If this config was used earlier on this box before the reinstall, then a newer version of syslog-ng must have been installed on it.
Download a newer version of syslog-ng Open Source Edition (at least 3.0, but newer is recommended) and install it on the box, then TLS support will work. You can download a package from the BalaBit website at http://www.balabit.com/network-security/syslog-ng/opensource-logging-system/... or check the packages.debian.org site.
@Patrick: In option names syslog-ng treats dashes and underscores identically, it does not matter which one you use.
Regards, Robert
On Wednesday, January 19, 2011 17:36 CET, Fabien Bagard<fabien.bagard@parrot.com> wrote:
I am using syslog-ng 2.0.9
I don't know why this config doesn't work.
It was working on the very same box before a re-installation. Base system is the same : Debian Lenny. syslog-ng is the latest available in the repos.
Thanks for your help
On 01/19/2011 05:22 PM, Patrick H. wrote:
Actually, what version of syslog-ng are you using? According to the docs, tls was only available in the premium edition until 3.0. So if youre using something older, that might be why.
-Patrick
Sent: Wed Jan 19 2011 09:19:55 GMT-0700 (Mountain Standard Time) From: Patrick H.<syslogng@feystorm.net> To: Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu> Subject: Re: [syslog-ng] Error starting syslog-ng
Hrm, when I looked at the docs I was seeing dash, however I looked through some more and I see both dash and underscore. Doc bug?
Anyway I cant see anything else wrong with it :-/
-Patrick
Sent: Wed Jan 19 2011 09:09:33 GMT-0700 (Mountain Standard Time) From: Fabien Bagard<fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] Error starting syslog-ng
I am pretty sure it is an underscore. But I tried and neither dash nor underscore solve my problem.
On 01/19/2011 05:03 PM, Patrick H. wrote:
Its a dash in the 'peer-verify' not underscore as 'peer_verify'. See if that solves it.
-Patrick
Sent: Wed Jan 19 2011 01:31:36 GMT-0700 (Mountain Standard Time) From: Fabien Bagard<fabien.bagard@parrot.com> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] Error starting syslog-ng
> Hi list ! > > I have a problem to start syslog-ng. I got a syntax error on line > in bold : > > ###### > # sources > > # all known message sources > source s_all { > # message generated by Syslog-NG > internal(); > # standard Linux log source (this is the default place for the > syslog() > # function to send logs to) > unix-stream("/dev/log"); > # messages from the kernel > file("/proc/kmsg" log_prefix("kernel: ")); > }; > > source s_unix { > tcp( > port(514) > * tls(* > key_file("/etc/syslog-ng/certs/logger.parrot.biz.key") > cert_file("/etc/syslog-ng/certs/logger.parrot.biz.crt") > ca_dir("/etc/syslog-ng/certs/CA/") > peer_verify(optional-untrusted) > ) > ); > }; > > > But I can't figure out what ! > > Can someone point this error to me ? > > Thanks > -- > Fabien Bagard > IT Department > tel + 33 (0)1 48 03 60 40 > > -------------------------------------------------------------------------------- > Parrot SA > 174, Quai de Jemmapes | 75010 Paris - France > tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 > http://www.parrot.com > -------------------------------------------------------------------------------- > > This e-mail message and any attached document(s) are for the sole use of > the intended recipient(s)and may contain confidential and legally > privileged information. > Any unauthorized review, copy, use and/or disclosure is prohibited. > If you are not the intended recipient, please contact the sender by > reply e-mail and destroy all copies of the original. > > ------------------------------------------------------------------------ > > ______________________________________________________________________________ > Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng > Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng > FAQ:http://www.campin.net/syslog-ng/faq.html > > >
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
program_override
------------------------------------------------------------------------
______________________________________________________________________________ Member info:https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation:http://www.balabit.com/support/documentation/?product=syslog-ng FAQ:http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40
-------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com --------------------------------------------------------------------------------
This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.campin.net/syslog-ng/faq.html
-- Fabien Bagard IT Department tel + 33 (0)1 48 03 60 40 -------------------------------------------------------------------------------- Parrot SA 174, Quai de Jemmapes | 75010 Paris - France tel + 33 (0)1 48 03 60 60 | fax + 33 (0)1 48 03 70 08 http://www.parrot.com -------------------------------------------------------------------------------- This e-mail message and any attached document(s) are for the sole use of the intended recipient(s)and may contain confidential and legally privileged information. Any unauthorized review, copy, use and/or disclosure is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original.
On Wed, 2011-01-19 at 09:19 -0700, Patrick H. wrote:
Hrm, when I looked at the docs I was seeing dash, however I looked through some more and I see both dash and underscore. Doc bug?
Anyway I cant see anything else wrong with it :-/
dash and underscore are equivalent in keywords. there was no consistency and I didn't want to break compatibility. The preferred one is dash, but underscore is just as good. The docs should only contain dash, if it doesn't, it's a bug. -- Bazsi
participants (4)
-
Balazs Scheidler
-
Fabien Bagard
-
Fekete Róbert
-
Patrick H.