Updating Ciscoworks VMS with IPS S182

[mhicks]

I have updated my IPS sensor to S182 version 5.01. I goto the Management Center for IDS Sensors and click on Query Sensor. The correct sensor verison is displayed. I apply the version change and get the error message.

Object update failed. The sensor version 5.0(3)S182.0 is an unrecognized version. You may need to apply a signature update to the system for support of this sensor.

I have applied the IPS-sig-S182.... update to the console before applying the change in the sensor version.

What is going on?

[royw]

You may be experiencing a problem (CSCsb40652) we are developing a patch for. S180 and S181 have an invalid group id in the nsdb5 tar file. This only affects IDS MC on Solaris. If you are running Solaris, here's the work-around:

log in as root

cd /opt/CSCOpx/MDC/Apache/htdocs/vms

chown -R casuser *

chgrp -R casusers *

We are developing the patch for IDS MC 2.1 (it's in test).

If you want to see the problem prior to performing the above work-around, then:

log in as root

cd /opt/CSCOpx/MDC/Apache/htdocs/vms/nsdb5/html

ls -l

you should see numeric user and group IDs (48.25).

If you see (48.nobody) for all files, then you are not experiencing this problem.

HTH,

Roy

[mhicks]

The installation is on a Windows 2000 OS platform. If I reimport the sensor, the problem goes away untill I do another update.