Safeguard For Sudo archiving using NFS/CIFS/SMB (4379009)

One Identity doesn't support any NFS/CIFS/SMB shares directly, but if you are doing an archiving / backup to a remote system, here is an issue you might see:

Error seen when attempting to archive the pmevents.db: 

root@xyz:/var/opt/quest/qpm4u# /opt/quest/sbin/pmlogadm archive /var/opt/quest/qpm4u/pmevents.db sudo-events-archive-2025-04-03-1359 --dest-dir /archive/xyz--older-than 90
Archive Job Summary
Source Log : /var/opt/quest/qpm4u/pmevents.db
Archive Name : sudo-events-archive-2025-04-03-1359
Destination Dir : /archive/xyz
Zip Archive : Yes
Cut off time : 2025/01/03 00:00:00

336950 events will be archived.
Failed opening archive log: .
Archive task complete. 

A trace of pmlogadm will show permission denied while trying to write the file. For example:

fcntl(9, 0x6 /* F_SETLK */, {l_type=0 /* F_RDLCK */, l_whence=0 /* SEEK_SET */, l_start=1073741824, l_len=1}) = -1 EACCES (Permission denied)

File opened for write, the code wrote a few bytes successfully (write system call outputs the successfully written bytes).

SQLITE databases dislike being on a network share due the advanced locking they do when being used with WA.

Write the archive locally first and then move it to the final destination. One Identity supports local archiving only, hence if you face any issue with local archiving please contact Technical Support:

 https://support.oneidentity.com/create-service-request

All information regarding local archiving / backup can be found in our Admin Guide:

https://docs.oneidentity.com/bundle/safeguard-for-sudo_administration-guide_7.4/page/guides/admin/backupandarchiveeventlogs.htm