<html><body><div style="font-family: Arial; font-size: 14pt; color: #000000"><div aria-label="Compose body">So, respin a new RPM using rpmrebuild, dropping the zos plugins ? i.e. the appropriate section of the SPEC would now look like this: Provides: audit-audispd-plugins = 1.8-0.28.1 #Requires: openldap2 #Requires: rpmlib(PayloadFilesHavePrefix) <= 4.0-1 #Requires: rpmlib(CompressedFileNames) <= 3.0.4-1 Requires: libaudit.so.0()(64bit) Requires: libauparse.so.0()(64bit) Requires: libc.so.6()(64bit) Requires: libc.so.6(GLIBC_2.2.5)(64bit) Requires: libc.so.6(GLIBC_2.3)(64bit) Requires: libc.so.6(GLIBC_2.3.4)(64bit) Requires: libc.so.6(GLIBC_2.4)(64bit) Requires: libc.so.6(GLIBC_2.8)(64bit) #Requires: liblber-2.4.so.2()(64bit) #Requires: libldap-2.4.so.2()(64bit) Requires: libpthread.so.0()(64bit) Requires: libpthread.so.0(GLIBC_2.2.5)(64bit) Requires: libpthread.so.0(GLIBC_2.3.2)(64bit) #Requires: rpmlib(PayloadIsLzma) <= 4.4.6-1 #suggest #enhance %description The audit-audispd-plugins package contains plugin components for the audit dispatcher (audispd). Authors: -------- Steve Grubb <sgrubb@redhat.com> %files %config(noreplace) %attr(0640, root, root) "/etc/audisp/audisp-remote.conf" %config(noreplace) %attr(0640, root, root) "/etc/audisp/plugins.d/au-remote.conf" #%config(noreplace) %attr(0640, root, root) "/etc/audisp/plugins.d/audispd-zos-remote.conf" #%config(noreplace) %attr(0640, root, root) "/etc/audisp/zos-remote.conf" %attr(0750, root, root) "/usr/sbin/audisp-remote" #%attr(0750, root, root) "/usr/sbin/audispd-zos-remote" %doc %attr(0644, root, root) "/usr/share/man/man5/audisp-remote.conf.5.gz" #%doc %attr(0644, root, root) "/usr/share/man/man5/zos-remote.conf.5.gz" %doc %attr(0644, root, root) "/usr/share/man/man8/audisp-remote.8.gz" #%doc %attr(0644, root, root) "/usr/share/man/man8/audispd-zos-remote.8.gz" </div><div> </div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">From: salgak@comcast.net To: "Steve Grubb" <sgrubb@redhat.com> Cc: linux-audit@redhat.com Sent: Monday, February 9, 2015 12:26:15 PM Subject: Re: Audit: audisp-remote plugin: why is OpenLDAP a dependency ?? <div> </div><div style="font-family: Arial; font-size: 14pt; color: #000000" data-mce-style="font-family: Arial; font-size: 14pt; color: #000000;"><div>Yeah, just crawled into the rpm and saw that. Going to try to re-spin a smaller RPM without the zos and see if that works. </div><div> </div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;">From: "Steve Grubb" <sgrubb@redhat.com> To: salgak@comcast.net Cc: linux-audit@redhat.com Sent: Monday, February 9, 2015 12:00:58 PM Subject: Re: Audit: audisp-remote plugin: why is OpenLDAP a dependency ?? <div> </div>On Mon, 9 Feb 2015 13:47:36 +0000 (UTC) salgak@comcast.net wrote: <div> </div>> I'm currently dealing with a VMware appliance, and need to export my > audit logs. Despite VMware telling me to use the audisp-remote plugin > with auditd, I get a dependency check for OpenLDAP, and the install > fails. > > I'm pointing to my audit server (a Splunk box) via IP address. Is > there any workaround, or am I stuck adding even MORE software to the > appliance ?? <div> </div>The package the plugin is included in contains all of them. The zos-remote plugin is the one that wants openldap. <div> </div>-Steve </div><div> </div></div></div><div> </div></div></body></html>