-
Title
xcbError Could not extend archived event with destination path -
Description
When a Cleanup Policy is run every time it deletes an audit trail file a false alarm message is getting sent.
The content of the messages are the following:
xcbError: Could not extend archived event with destination path
Affected product versions: One Identity Safeguard for Privileged Sessions 5.7.0 -> 5.9.0
-
Cause
Due to a software error the Cleanup operation is logged as it were an Archive operation: the log function wants to write the new path of the audit trail file. In case of Archiving this makes sense but in case of Cleanup the actual audit trail file is getting deleted and does not exist any more at the file path. -
Resolution
Fortunately this message is
mostlycompletely harmless and can be safely ignored.The issue was fixed in product version 5.10.0. under the issue number PAM-8377
It is possible to work around the issue by patching the faulty software module using the attached script. Use it for your own risk.
Usage:
- upload it with an SCP client to /root directory
- log in to boot shell and execute the following:
bash SPS_cleanup_patch.shThe next run of Cleanup should not generate false error messages and finish successfully.
-
Change Request
PAM-8377 -
Attachments