topic Frequently getting messages - syslog: audit_log: cannot set effective uid before audwrite in Operating System - HP-UX

Frequently getting messages - syslog: audit_log: cannot set effective uid before audwrite

Jerome D'silva_1 — Tue, 21 Oct 2003 09:48:23 GMT

Hi,
We have a Hp9000 server running HPUX 11.0. Recently I converted this machine to the trusted mode and was trying to use an application which pam to authenticate.
The pam login fails while the syslog gives the message
"syslog: audit_log: cannot set effective uid before audwrite".
Is there any problem with the /tcb or with the passwd file or any permissions?.

Thanks
Jerome

Re: Frequently getting messages - syslog: audit_log: cannot set effective uid before audwrite

Vijaya Kumar_3 — Tue, 21 Oct 2003 09:53:38 GMT

I am sure abt ur issue, but i recently got an similay issue, where my system is not resolving UIDs to usernames. I think it was some problem with no space in /var and may be in /

but i am not sure abt trusted system
thanks

Re: Frequently getting messages - syslog: audit_log: cannot set effective uid before audwrite

Jerome D'silva_1 — Tue, 21 Oct 2003 10:50:17 GMT

Thanks .. The permissions and file system space seems to be fine.. Any other hints please

Re: Frequently getting messages - syslog: audit_log: cannot set effective uid before audwrite

Paddy_1 — Tue, 21 Oct 2003 11:03:14 GMT

Just a Sanity Check : Try running /usr/sbin/pwck on the files.

Re: Frequently getting messages - syslog: audit_log: cannot set effective uid before audwrite

Jerome D'silva_1 — Wed, 22 Oct 2003 03:25:55 GMT

Reverting back to the non trusted mode did the trick

Thanks
Jerome