[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sun-managers
Subject:    Summary: cron audit problme
From:       Dieter Gobbers <gobbers () faw ! uni-ulm ! de>
Date:       2001-02-28 12:43:15
[Download RAW message or body]

I only got two replys:

On 27-Feb-01 Curt Glidden wrote:
> I'm not certian this is the answer, but have you
> checked the /etc/cron.d/cron.deny and cron.allow
> files?

I've checked that, but that wasn't the problem.

On 28-Feb-01 Hindley Nick wrote:
> Has the password expired for the user that you are  trying to run the job
> from?

No, the machine has been installed at 08/02/01, and MAXWEEKS is set to 13. And
I still can login as a user to the machine and edit my crontab file.
Btw. that happend to both, users and root.

------- My solution --------

I run "bsmunconv" and rebooted, cron was running fine again.
I than run "bsmconv" and rebooted once more, and cron is still running fine!

I checked the audit logfiles and now they are growing again!
I've no glue what caused the auditing to stop functioning correctly,
bsm(un)conf only addes/removes two lines to /etc/system and some other, less
important things. Maybe removing them (and rebooting) cleared some internal
state tables?

Greetings,

Dieter Gobbers

On 28-Feb-01 Dieter Gobbers wrote:
> I've done some further investigations and noticed something that might be
> related to the problem:
> 
> - The problem startet at 12/2/01, 1pm between and 2pm.
> - There is a audit logfile which stopped at 12/2/01 1:02pm !
> - I don't get any new audit entrys in the audit logfiles! I restarted auditd
> a
>   few times, but that doesn't change anything (except creating a new, nearly
>   empty logfile).
> - the machine has been rebooted 6 days ago (at 22/2/01) but nothing changed
> - yesterday I installed the latest recommended patches and rebooted - no
> result
> 
> TIA,
> 
> Dieter
> 
> -----FW: <XFMail.010227100921.gobbers@faw.uni-ulm.de>-----
> 
> Date: Tue, 27 Feb 2001 10:09:21 +0100 (MET)
> Sender: sunmanagers-admin@sunmanagers.org
> From: Dieter Gobbers <gobbers@faw.uni-ulm.de>
> To: sunmanagers@sunmanagers.org
> Subject: cron audit problme
> 
> Hi sunmanager,
> 
> I've setup a secured server and activated BSM (basic security
> module)/auditing.
> Now I cannot run any cron jobs! From cron's logfile:
> 
> ! cron audit problem. job failed (/bin/echo "GAGAGA" > /dev/console) for user
> root Tue Feb 27 09:52:00 2001
> 
> 
> Has anyone a suspiction what I might have done wrong?
> 
> OS: Solaris 8

Dieter Gobbers
UNIX Systems and Network Administrator
-- 
im Auftrag des FAW Ulm (http://www.faw.uni-ulm.de)

Ingenieurbuero Dieter Gobbers; Unix- und Netzwerkberatung und -betreuung
Kreuzstr. 19, 89160 Dornstadt, Tel.: 07348/928538
email: dieter@gobbers.de, http://www.gobbers.de
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

[prev in list] [next in list] [prev in thread] [next in thread]