We cannot call this an issue but a request

[neilkamulkar]

Dear Team, Which is the best OS i.e. tried and tested OS to install ships please let us know

Thanks & Regards, Indranil Kamulkar

[GeoffWalton]

I suggest a Linux platform. Ubuntu or Slackware platforms get the most testing.

[https://www.trustedsec.com/wp-content/uploads/2018/10/TS_Wordmark_grn-e1539701369375-1.png]http://trustedsec.com/

Geoff Walton

Senior Security Consultant

o:

877.550.4728 m:440.344.8967

[cid:[email protected]]https://twitter.com/TrustedSec [cid:[email protected]] https://www.facebook.com/1trustedsec/ [cid:[email protected]] https://www.linkedin.com/company/trustedsec-llc/

From: Indranil Kamulkar [email protected] Reply-To: trustedsec/SHIPS [email protected] Date: Friday, November 23, 2018 at 2:57 AM To: trustedsec/SHIPS [email protected] Cc: Subscribed [email protected] Subject: [EXTERNAL] [trustedsec/SHIPS] We cannot call this an issue but a request (#15)

Dear Team, Which is the best OS i.e. tried and tested OS to install ships please let us know

Thanks & Regards, Indranil Kamulkar

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/trustedsec/SHIPS/issues/15, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AKKpBVBh1-Mk2QWU4qqRu2k8o4cjI75uks5ux6p9gaJpZM4YwOyv.

The information in and any documents attached to this e-mail are the sole property of TrustedSec, LLC and may contain confidential information, including business information protected by applicable privacy law. Such information and documents are intended only for receipt and use by the person(s) named above in this e-mail. If you are not an intended recipient, you are hereby notified that any review, disclosure, distribution, or duplication of the information in or documents attached to this e-mail is not permitted and may violate applicable law. If you are not an intended recipient, please contact the sender by reply email and destroy each copy of the original e-mail, including all attached documents. Thank you.

[neilkamulkar]

Dear Team, Unable to install SQLiteORM-0.9.2.gem and usa-0.9.0.gem on Ubuntu Server 16.04 can someone please help

[GeoffWalton]

Can you give me a little additional information? These gems are not published in the gem repositories. It is included with ships. You need to pass the local file to gem. This may be the issue?

You may need to install the SQLite3 development packages for ubuntu as well. When the SQLite3 gem is installed it has to build ruby bindings for the SQLite library and requires the C headers are present on the system.

[https://www.trustedsec.com/wp-content/uploads/2018/10/TS_Wordmark_grn-e1539701369375-1.png]http://trustedsec.com/

Geoff Walton

Senior Security Consultant

o:

877.550.4728 m:440.344.8967

[cid:[email protected]]https://twitter.com/TrustedSec [cid:[email protected]] https://www.facebook.com/1trustedsec/ [cid:[email protected]] https://www.linkedin.com/company/trustedsec-llc/

From: Indranil Kamulkar [email protected] Reply-To: trustedsec/SHIPS [email protected] Date: Monday, December 3, 2018 at 7:33 AM To: trustedsec/SHIPS [email protected] Cc: Geoff Walton [email protected], Comment [email protected] Subject: [EXTERNAL] Re: [trustedsec/SHIPS] We cannot call this an issue but a request (#15)

Dear Team, Unable to install SQLiteORM-0.9.2.gem and usa-0.9.0.gem on Ubuntu Server 16.04 can someone please help

— You are receiving this because you commented. Reply to this email directly, view it on GitHubhttps://github.com/trustedsec/SHIPS/issues/15#issuecomment-443694783, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AKKpBVW16CEarANlSoJ3PvrftdCf2NLPks5u1RoGgaJpZM4YwOyv.

The information in and any documents attached to this e-mail are the sole property of TrustedSec, LLC and may contain confidential information, including business information protected by applicable privacy law. Such information and documents are intended only for receipt and use by the person(s) named above in this e-mail. If you are not an intended recipient, you are hereby notified that any review, disclosure, distribution, or duplication of the information in or documents attached to this e-mail is not permitted and may violate applicable law. If you are not an intended recipient, please contact the sender by reply email and destroy each copy of the original e-mail, including all attached documents. Thank you.

[neilkamulkar]

Can you give me a little additional information? These gems are not published in the gem repositories. It is included with ships. You need to pass the local file to gem. This may be the issue? You may need to install the SQLite3 development packages for ubuntu as well. When the SQLite3 gem is installed it has to build ruby bindings for the SQLite library and requires the C headers are present on the system. [https://www.trustedsec.com/wp-content/uploads/2018/10/TS_Wordmark_grn-e1539701369375-1.png]<http://trustedsec.com/> Geoff Walton Senior Security Consultant o: 877.550.4728 m:440.344.8967 [cid:[email protected]]https://twitter.com/TrustedSec [cid:[email protected]] https://www.facebook.com/1trustedsec/ [cid:[email protected]] https://www.linkedin.com/company/trustedsec-llc/ From: Indranil Kamulkar [email protected] Reply-To: trustedsec/SHIPS [email protected] Date: Monday, December 3, 2018 at 7:33 AM To: trustedsec/SHIPS [email protected] Cc: Geoff Walton [email protected], Comment [email protected] Subject: [EXTERNAL] Re: [trustedsec/SHIPS] We cannot call this an issue but a request (#15) Dear Team, Unable to install SQLiteORM-0.9.2.gem and usa-0.9.0.gem on Ubuntu Server 16.04 can someone please help — You are receiving this because you commented. Reply to this email directly, view it on GitHub<#15 (comment)>, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AKKpBVW16CEarANlSoJ3PvrftdCf2NLPks5u1RoGgaJpZM4YwOyv. The information in and any documents attached to this e-mail are the sole property of TrustedSec, LLC and may contain confidential information, including business information protected by applicable privacy law. Such information and documents are intended only for receipt and use by the person(s) named above in this e-mail. If you are not an intended recipient, you are hereby notified that any review, disclosure, distribution, or duplication of the information in or documents attached to this e-mail is not permitted and may violate applicable law. If you are not an intended recipient, please contact the sender by reply email and destroy each copy of the original e-mail, including all attached documents. Thank you.

Dear Team, I am executing command from my console prompt # gem install --force --local usa-0.9.0.gem it gives me the below error ... ERROR: While executing gem ... (ArgumentError) "" href="" is not an octal string Please assist ... Am I doing something wrong ...

[neilkamulkar]

Dear Team, My gems error have been resolved and now I am stuck up onto another problem ... Frankly speaking, I am first time working on ruby and have no knowledge at all ... Steps which I have completed are as follows ... Installed ruby gem install sqlite3 gem install net-ldap gem install usa-0.9 (Shipped with SHIPS) Installation of SHIPS in /opt/SHIPS/ ships.ships 770 for directories ships.ships 640 for files created ssl keys and copied them to the conf direcroty Please check below my conf file

I am highlighting some points and lines which i have not understood ( Bold ) ships@shipsserver01:/opt/SHIPS/etc$ pwd /opt/SHIPS/etc ships@shipsserver01:/opt/SHIPS/etc$ cat conf web: port: 443 serverName: 192.168.8.101 maxclients: 1000 daemonUser: ships SSLCertificate: /opt/SHIPS/etc SSLPrivateKey: /opt/SHIPS/etc

data: dataPath: /var/cache/SHIPS.sqlite Could not find this ??? styleSheet: /opt/SHIPS/etc/style.css

app: syslog: true sessionTimeout: 300 foreground: true superUserIdent: IdentSQLite superUserToken: "1" ACLAuthorsIdent: IdentLDAP ACLAuthorsToken: S-1-5-21-3882956444-149478881-1526783422-2116 defaultLoginIdent: IdentLDAP allowedLoginIdents:

• IdentSQLite
• IdentLDAP

devices: length: 20 age: 7

**identityOptions:

exampleOption: exampleValue

identLDAP_host: 10.10.10.10 identLDAP_port: 389

identLDAP_encryption: simple_tls

identLDAP_user_base: DC=example,DC=local identLDAP_group_base: OU=Test,DC=example,DC=local identLDAP_name_attribute: sAMAccountName identLDAP_group_class: group identLDAP_user_class: user identLDAP_token_attribute: objectSid identLDAP_group_attribute: memberOf identLDAP_user_attribute: "member:1.2.840.113556.1.4.1941:" identLDAP_group_required: CN=SHIPS users,OU=Test,DC=example,DC=local identLDAP_username: CN=ships DS. reader,OU=Test,DC=example,DC=local identLDAP_password: SomeReallHardPassword identDevice_default_folder: 2 identDevice_validators:

• DeviceValidatorLDAP** Is this required ??? validatorOptions:

exampleOption: exampleValue

DeviceValidatorLDAP_host: 10.10.10.10

DeviceValidatorLDAP_encryption: simple_tls

DeviceValidatorLDAP_port: 389 DeviceValidatorLDAP_base: DC=example,DC=local DeviceValidatorLDAP_username: CN=ships DS. reader,OU=Test,DC=example,DC=local DeviceValidatorLDAP_password: SomeReallHardPassword DeviceValidatorLDAP_class: computer DeviceValidatorLDAP_name_attribute: name

[rrossouw01]

I am not sure this will help anyone but after reading through most issues and experiencing some myself I made a blog posting that may help someone to bootstrap a SHIPS server on CentOS7.

https://blog.ls-al.com/ships-password-rotation/

NOTE you will have to expand on my setup by adding LDAP parts.