topic Re: syslogd in chroot forwarding to central server in Operating System - HP-UX

syslogd in chroot forwarding to central server

Jeff_Traigle — Wed, 06 Jul 2011 22:17:07 GMT

I have the chroot environment working. There's a syslogd running in the chroot environment so messages get logged to /var/adm/syslog/syslog.log and /newroot/var/adm/syslog/syslog.log. I have both instances configured to forward all messages to our central syslog server. The chroot instance of syslogd is not forwarding its messages, however. I copied /etc/resolv.conf to /new/root/etc/resolv.conf so the hostname can be resolved via DNS. Must be something else I'm missing (or it simply won't work for some reason). Anyone done this?

Re: syslogd in chroot forwarding to central server

Laurent Menase — Thu, 07 Jul 2011 00:00:27 GMT

do you have a /new/root/etc/syslog.conf

Re: syslogd in chroot forwarding to central server

Naj — Thu, 07 Jul 2011 02:28:02 GMT

Hi,

How about config file for log, did you config properly?

Re: syslogd in chroot forwarding to central server

Jeff_Traigle — Thu, 07 Jul 2011 06:58:15 GMT

Same syslog.conf for both instances:

mail.debug              /var/adm/syslog/mail.log
*.info;mail.none        /var/adm/syslog/syslog.log
*.alert                 /dev/console
*.alert                 root
*.emerg                 *
*.info       @loghost

Re: syslogd in chroot forwarding to central server

Denver Osborn — Thu, 07 Jul 2011 14:54:23 GMT

Have you tried running the chroot'd syslogd in debug mode?

/usr/sbin/syslogd -d -D -N

-denver

Re: syslogd in chroot forwarding to central server

Jeff_Traigle — Thu, 07 Jul 2011 15:28:16 GMT

Hey, Denver. Hope all is well with you.

I haven't yet. Figured there was some debug option, but hadn't looked at it yet. Been bouncing between several projects and just helping out on this one. I'll try it today to see what info it yields and report back.

Re: syslogd in chroot forwarding to central server

Denver Osborn — Thu, 07 Jul 2011 15:42:31 GMT

Hey Jeff, all is well here.

I was able to play around and got it working on an 11iv3 box. Here's what I have in my chroot. I suspect you're either missing libnss_* libs or ip dev special files from your chroot. Turns out the debug option didn't help any, so I ran tusc against the chrooted syslogd and copied what was missing.

root/newroot # find ./
.
./etc
./etc/syslog.conf
./etc/services
./etc/resolv.conf
./etc/nsswitch.conf
./var
./var/adm
./var/adm/syslog
./var/adm/syslog/mail.log
./var/adm/syslog/syslog.log
./usr
./usr/sbin
./usr/sbin/syslogd
./usr/sbin/tusc
./usr/lib
./usr/lib/libc.2
./usr/lib/libdld.2
./usr/lib/dld.sl
./usr/lib/libnss_compat.1
./usr/lib/libnss_dce.1
./usr/lib/libnss_dns.1
./usr/lib/libnss_files.1
./usr/lib/libnss_nis.1
./usr/lib/tztab
./usr/bin
./usr/bin/ps
./usr/bin/logger
./sbin
./sbin/sh
./sbin/ls
./sbin/cat
./dev
./dev/log
./dev/console
./dev/udp
./dev/log.un
./dev/ip
./dev/ip6
./dev/rawip
./dev/rawip6
./dev/udp6

Re: syslogd in chroot forwarding to central server

Jeff_Traigle — Thu, 07 Jul 2011 22:27:53 GMT

Thanks, Denver. We were missing services, the IP and UDP device files, and some of the libnss libraries that ssh_chroot_setup.sh didn't copy. It's working like a champ now.