+ tty?? root-sfmdb

Taskin Saif_1 — Thu, 24 Apr 2008 00:42:54 GMT

Folks,

I am having a problem with our rx4640 server running our main ERP oracle database. I am getting HEAPS of + tty?? root-sfmdb logged in the syslog. Below is an example of how many I am getting.

Apr 24 02:44:55 erpprod2 above message repeats 3 times
Apr 24 02:57:13 erpprod2 su: + tty?? root-sfmdb
Apr 24 02:57:15 erpprod2 su: + tty?? root-sfmdb
Apr 24 03:12:16 erpprod2 su: + tty?? root-sfmdb
Apr 24 03:12:17 erpprod2 su: + tty?? root-sfmdb
Apr 24 03:27:18 erpprod2 su: + tty?? root-sfmdb
Apr 24 03:42:21 erpprod2 su: + tty?? root-sfmdb
Apr 24 03:44:56 erpprod2 above message repeats 3 times
Apr 24 03:57:22 erpprod2 su: + tty?? root-sfmdb
Apr 24 03:57:23 erpprod2 su: + tty?? root-sfmdb
Apr 24 04:12:24 erpprod2 su: + tty?? root-sfmdb
Apr 24 04:12:25 erpprod2 su: + tty?? root-sfmdb
Apr 24 04:27:27 erpprod2 su: + tty?? root-sfmdb
Apr 24 04:42:30 erpprod2 su: + tty?? root-sfmdb
Apr 24 04:44:56 erpprod2 above message repeats 3 times
Apr 24 04:57:31 erpprod2 su: + tty?? root-sfmdb
Apr 24 04:57:32 erpprod2 su: + tty?? root-sfmdb
Apr 24 05:12:33 erpprod2 su: + tty?? root-sfmdb
Apr 24 05:12:34 erpprod2 su: + tty?? root-sfmdb
Apr 24 05:27:35 erpprod2 su: + tty?? root-sfmdb
Apr 24 05:42:39 erpprod2 su: + tty?? root-sfmdb
Apr 24 05:44:57 erpprod2 above message repeats 3 times
Apr 24 05:57:40 erpprod2 su: + tty?? root-sfmdb
Apr 24 05:57:41 erpprod2 su: + tty?? root-sfmdb
Apr 24 06:12:42 erpprod2 su: + tty?? root-sfmdb
Apr 24 06:12:43 erpprod2 su: + tty?? root-sfmdb
Apr 24 06:27:44 erpprod2 su: + tty?? root-sfmdb
Apr 24 06:42:47 erpprod2 su: + tty?? root-sfmdb
Apr 24 06:44:57 erpprod2 above message repeats 3 times
Apr 24 06:57:48 erpprod2 su: + tty?? root-sfmdb
Apr 24 06:57:49 erpprod2 su: + tty?? root-sfmdb
Apr 24 07:12:51 erpprod2 su: + tty?? root-sfmdb
Apr 24 07:12:52 erpprod2 su: + tty?? root-sfmdb
Apr 24 07:27:53 erpprod2 su: + tty?? root-sfmdb
Apr 24 07:42:56 erpprod2 su: + tty?? root-sfmdb
Apr 24 07:44:58 erpprod2 above message repeats 3 times
Apr 24 07:57:57 erpprod2 su: + tty?? root-sfmdb
Apr 24 07:57:58 erpprod2 su: + tty?? root-sfmdb
Apr 24 08:12:59 erpprod2 su: + tty?? root-sfmdb
Apr 24 08:13:00 erpprod2 su: + tty?? root-sfmdb
Apr 24 08:28:01 erpprod2 su: + tty?? root-sfmdb
Apr 24 08:43:05 erpprod2 su: + tty?? root-sfmdb
Apr 24 08:44:58 erpprod2 above message repeats 3 times

As you can see they are constant. I have seen articles on how to stop them from coming up but I am concerned that if I do that I will be masking/hiding a problem. Can anyone give me some idea of why these are coming up so often?

One of the other articles I read said to check the cron jobs and below is a listing of the crontab for root. As you will notice there is one job commented out that deals with sfmdb but it seems to make no difference that it is commented out.

# Entry(s) in /opt/hpservices/RemoteSupport are for HP Instant Support Enterprise Edition
0 0 * * 1 /opt/hpservices/RemoteSupport/config/pruneIncidents.sh > /dev/null 2>&1
# Entry for monitoring status of the EMSHAProvider
# * * * * * sleep 15;/etc/opt/resmon/lbin/mon_EMSHAProvider_state.sh
# 5,20,35,50 * * * * /opt/sfm/bin/restart_sfm.sh
# VAEH - Checks for new VA devices every day and sends Install event to ISEE
0 0 * * * /opt/sanmgr/jre/bin/java -classpath ./:/opt/hpservices/contrib/vaeh/lib/util.jar:/opt/hpservices/contrib/vaeh/lib/vaeh.jar:/opt/hpservices/contrib/vaeh/lib/installevent.jar:/opt/hpservices/contrib/vaeh/lib/xerces.jar -DVAEH_ROOT=/opt/hpservices/contrib/vaeh InstallEventGenerator ON
# Update COM Catalogue
#0 3 * * * /home/oracle/scripts/com/catalogue_update.sh > /home/oracle/scripts/com/catalogue_update.log
#
55 23 * * 1-5 /opt/perf/bin/extract -xp -r /home/bfitzpa/zgbltemplate -g -b today 7:00 -e today 18:00 -f stdout | /bin/mailx -s 'svr004 performance report' user@company.com >/tmp/performance.log 2>&1

Any help with this would be appreciated.

Brian Fitzpatrick

Re: + tty?? root-sfmdb

SUDHAKAR_18 — Thu, 24 Apr 2008 03:46:27 GMT

Hi,

SFM states "System Fault management"
It is the monitoring Application which is loaded in your system and came along with the OS.like event monitoring sevice (EMS)

You can check SFM installed in your system by #swlist -l product |grep SFM

Normally it monitors systems states for each 5 minutes.As you shown root-sfmdb entries are occurred in your syslog.+ indicates it is successfull login to the SFM database.

By removing crontab entries , it may not possible to stop the root-sfmdb entries.I suspects SFM version is not loaded properly on your system.

First you check which SFM version loaded in system.Uninstall the SFM bundles from system using swremove.
Before unistalling stop cimserver using cimserver -s command.

Install a fresh / upgraded SFm version.

Hope this helps!

Time is precious!

Re: + tty?? root-sfmdb

Jeeshan — Thu, 24 Apr 2008 03:50:28 GMT

Hi Brian

These su are executed by a process that is not attached to a tty (tty??).

Do you have some process like "sleep" for example that are running?
You must check for the parent process.

you crontab entries are likely provided by HP. You can also check those processes running in crontab.

Re: + tty?? root-sfmdb

SUDHAKAR_18 — Mon, 05 May 2008 07:07:51 GMT

Kindly update the case!

Re: + tty?? root-sfmdb

Russell.Wood — Thu, 11 Dec 2008 02:46:22 GMT

Move the cron jobs from roots crontab to sfmdb's crontab.

topic Re: + tty?? root-sfmdb in Operating System - HP-UX

+ tty?? root-sfmdb

Re: + tty?? root-sfmdb

Re: + tty?? root-sfmdb

Re: + tty?? root-sfmdb

Re: + tty?? root-sfmdb