Pandora RC Installation

To install Pandora RC (formerly called eHorus), the installers must be downloaded according to the operating system used as a client.

Download the agent for MS Windows® (32 or 64 bit CPU):

You need administrator permissions to install the Pandora RC agent. Once downloaded, decompress and run the installer. This agent has been tested on the available versions of MS Windows®, from Windows XP® to Windows 10®. Since the installer is not signed, it may show a warning on installation and then proceed with the installation.

The license terms must be accepted:

For normal installations click Typical. To change the installation directory, click Custom.

For normal installations click on Typical. To change the installation directory, click Custom.

In this screen you will need to enter the user name that you have in the Pandora RC platform so that the agent can provision and work correctly.

In addition, and very important, an agent password can be set for this installation. This password can be added or modified later. To set a password at this point, enter it in the Password to protect access to this computer text box (image above).

You will be asked if you want to start the Pandora RC agent on that machine and add a shortcut icon on the desktop:

If you have correctly configured the agent (setting the provision user) and the agent has internet connection, you can start using Pandora RC. The installation will be finished successfully.

You should see the Pandora RC status icon in the MS Windows® notification area:

The green icon means that the agent is running and provisioned. Red means that it could not be provisioned.

Right-clicking on the icon displays the following options:

You will only be able to stop/restart Pandora RC subcomponents if the manager (Pandora RC Agent Menu) has been started with Administrator privileges. A user without privileges cannot stop Pandora RC nor change its configuration. If you press Configuration you will be able to see the identifier of that machine. The EKID is a unique number for each host managed by Pandora RC.

This machine, already provisioned and connected, should be visible in the Pandora RC portal.

The Pandora RC agent has been installed as a service. This means that the machine, even if it is restarted, will start again the Pandora RC services and it will still be available.

It runs with a privileged user, usually the “Administrator” user, with several parameters (all optional):

msiexec /i pandorarc_installer_windows-XX.msi /q PARAM1="value2" PARAM2="value2" ...

Example:

msiexec /i pandorarc_installer_windows-XX.msi /q EHUSER="userXXX"
EHKEY="`d877cb3c-82de-4b27-8dbf-1761f3345e7c`"
EHPASS="5555" EHORUSINSTALLFOLDER="C:\path\to\install"
STARTEHORUSSERVICE="1" DESKTOPSHORTCUT="0"

Where:

• EHUSER: Pandora RC user.
• EHKEY: Unique key.
• EHPASS: Agent password.
• STARTEHORUSSERVICE: Start the agent at the end of the installation (default 1).
• DESKTOPSHORTCUT: Create a shortcut on the desktop (default 1).
• EHORUSINSTALLFOLDER: Folder where you want to install the agent (default %ProgramFiles%\ehorus_agent)

Important notice:

• The quiet installation of Pandora RC agent must always be executed from a terminal with administrator permissions.
• Hyphens are reserved character words in MSI installers, so you have to escape them. In the example given, EHKEY is escaped since in order for it to take the entire chain as a literal, you have to enter double quotation marks.
• EHORUSINSTALLFOLDER should not have single quotation marks inside the existing ones. Respect spaces only with double quotation marks, which are always necessary for this purpose.
• Microsoft Framework .NET 4.0® must be installed to run on Windows XP® and Windows Server 2003®:

Like the other platforms (GNU/Linux®, macOS®) the MS Windows® agent can be updated centrally from the Web Console, but if it is required to be updated manually, it can be done with the same installation package. The system will detect that it is updating the software and will not overwrite the configuration files, updating only the code automatically.

Several RPM files are available depending on the RHEL version and processor architecture (32-bit or 64-bit). Installation on any version and architecture is similar.

Because the remote desktop is optional you will have to manually install some dependencies. It is possible that if you already have a desktop environment these dependencies are already installed. If it does not work, you should try to reinstall them, restart the Pandora RC agent and verify if it works.

Install the following dependencies:

dnf install tigervnc-server gdm gnome-classic-session \
 gnome-terminal nautilus-open-terminal control-center \
 liberation-mono-fonts metacity libnsl

Install the RPM file (recommended):

yum install pandorarc_agent-el8-x64-XX.rpm

Or by tarball:

tar xvzf pandorarc_agent_linux-XX.tar.gz
cd ehorus_agent/
./ehorus_agent_installer --install

You must manually configure the provisioning user in the file /etc/ehorus/ehorus_agent.conf and start the service:

systemctl start pandorarc_agent_daemon

Install the following dependencies:

dnf install \
  tigervnc-server gdm \
  gnome-classic-session \
  gnome-terminal nautilus-open-terminal \
  control-center liberation-mono-fonts gnome-kiosk libnsl

The RPM file is installed:

dnf install pandorarc_agent-el9-x64-XX.rpm

Or by tarball:

tar xvzf pandorarc_agent_linux-XX.tar.gz
cd ehorus_agent/
./ehorus_agent_installer --install

Manually configure the provisioning user in the file:

/etc/ehorus/ehorus_agent.conf

And start the service:

systemctl start pandorarc_agent_daemon

Because the remote desktop is optional, a number of dependencies will have to be installed manually. To do this, run the following command:

apt install tigervnc-standalone-server gnome-core gnome-panel \
 gnome-settings-daemon metacity nautilus gnome-terminal

Run the following command with administrative permissions:

dpkg -i pandorarc_agent_installer-x64-1.X.X.deb

Or install the tarball if you prefer:

tar xvzf pandorarc_agent_linux-XX.tar.gz
cd ehorus_agent/
./ehorus_agent_installer --install

Manually configure the provisioning user in the file /etc/ehorus/ehorus_agent.conf and restart the service:

/etc/init.d/pandorarc_agent_daemon start

It is possible that, if you already have a desktop environment, these dependencies are already installed. If you cannot connect to the desktop with Pandora RC the first time, try to reinstall them, restart the Pandora RC agent and check again.

/etc/gdm3/custom.conf

Depending on the distro (Rocky Linux / RHEL 8], Rocky Linux / RHEL 9 or Ubuntu 22.04) the dependencies must be installed manually.

To know the processor architecture:

uname -p

If it shows x86_64 it is 64-bit, otherwise 32-bit.

After downloading, copy the tarball file (*.tgz) to a temporary directory, open a terminal window with root rights (via su or sudo):

sudo -s

Or:

su -

Execute where the tarball file was copied:

tar xvzf pandorarc_agent_linux-XX.tar.gz
cd ehorus_agent/
./ehorus_agent_installer --install

Syntax:

./ehorus_agent_installer --install < option >

Options:

• To specify the user to which the agent will connect:

--eh_user < user >

• To specify the identification key to be used by the agent (only for advanced users):

--eh_key < key >

• So that the installer does not create the ehorus user (only recommended if you are not going to use the Display function):

--no_user

• Configure the custom temporary directory for the agent:

Useful in case you have the /tmp directory (default) and it is mounted with the noexec parameter:

--tmp_dir < custom_folder >

• Perform the entire installation without configuring the service and without starting it automatically when the computer starts:

--disabled

The file /etc/ehorus/ehorus_agent.conf is edited and the token eh_user is replaced by its user in Pandora RC.

To start the service:

systemctl start pandorarc_agent_daemon

To stop the service:

systemctl stop pandorarc_agent_daemon

To uninstall a Pandora RC agent installed by tarball, it has to be executed:

./ehorus_agent_installer --uninstall

macOS 11 or later is supported.

This installer is fully graphical, and once the process is finished, it will register and stay running on the machine.

1. The installer for MacOS in .DMG format can be downloaded from the Pandora FMS website.

When opening this file you will find the Pandora RC installer named pandorarc_agent.pkg which should also be opened.

2. You must accept the license terms and choose the installation folder, by default /usr/local/ehorus_agent/ (important).

3. Enter the user name previously created on the Pandora RC website.

4. It is recommended to provide a password to access the agent. This password is only used for your private use and is not stored in the Pandora RC website.

5. Access the Privacy & Security menu in Settings. The Accessibility, Screen Recording and Full Disk Access permissions should be assigned to the Pandora RC agent executable, located in the default directory /usr/local/ehorus_agent/ (or the different directory chosen in step number one, take into account for the following steps).

These permissions can be assigned in two ways:

• Manually find the directory from the + button of the accessibility menu (the folder /usr/local/ is a system folder, so to access it you must press the key combination CMD + Shift + .) and choose the file ehorus_agent.
• You can open the folder /usr/local/ehorus_agent (or the different directory chosen in step number one) in another window with the utility Finder (the key combination CMD + Shift + G) and drag and drop the executable ehorus_agent onto the corresponding permission in Settings.

Accessibility permits:

Screen recording permissions:

Data storage access permissions:

6. Once the three permissions have been added, the only thing left to do is to restart the Pandora RC agent. To do this, start Pandora RC Menu from the Applications menu, access the tray icon and activate the administrator actions by entering the respective password:

7. The menu is accessed again, the agent is stopped and restarted:

The installer for macOS in tarball format can be downloaded from the Pandora FMS website.

The file must be unzipped with:

tar -xvzf pandorarc_agent_installer-darwin-XXX.tgz

Enter the unzipped folder with:

cd ehorus_agent

Install with:

./ehorus_agent_installer --install

macOS has two custom options, one to specify the user to which the agent will connect:

--eh_user < user >

And another advanced option to specify the identification key to be used by the agent:

--eh_key < key >

Start the service:

launchctl bootstrap system /Library/LaunchDaemons/com.pandorafms.pandorarc_agent.plist

Stop the service:

launchctl bootout system /Library/LaunchDaemons/com.pandorafms.pandorarc_agent.plist

Access Programs and run the uninstaller named Pandora RC uninstaller.

Go back to Pandora FMS documentation index.