Voltar
-
Título
Upgraded to 4.1, solaris audit stopped working. Killed audit demon and now the daemon will not come back up -
Descrição
Solaris Audit not working after upgraded to 4.1 killed audit demon and now will not come back up. auditd is in maintenance mode and unable to get it out of it. -
Resolução
RESOLUTION 1 :
1 - To take auditd out of maintenance mode:
/usr/sbin/svcadm clear auditd2 - Then restart the service:svcadm restart svc/auditdRESOLUTION 2:1 - Uninstall the Authentication Services client2 - Take auditd out of maintenance mode3 - Reinstall the Authentication Service client4 - Restart the audit daemonOther Useful Troubleshooting Commands:
1 - Check for a process named 'auditd':ps -ef | grep auditdIf the process is not there, then do the following:On Solaris 10 and above2 - Check if the service is disabled:
svcs -a auditd
3 - If the service is disabled try to enable it:
svcadm enable auditd4 - Check now if the service is enabled:
svcs -a auditdIf the service is in maintenance mode, it means that audit is not enabled