topic Re: Audit file (disabling) in Operating System - OpenVMS

Audit file (disabling)

Joshua Gould — Fri, 20 Mar 2009 15:02:22 GMT

We're doing some DR testing and trying to restore our production system that has SAN storage to a smaller test box.

The issue that I'm having is that the audit log is specified to be stored on a SAN volume that obviously no longer exists on the smaller test box.

When we boot, we get as far as the audit server starting and it hangs endlessly since it can't open the drive/file.

All the commands for either disabling auditing or specifying where the log should be written basically assume the system is already up.

How can I get around this issue?

Re: Audit file (disabling)

Jim_McKinney — Fri, 20 Mar 2009 15:26:59 GMT

Add

$ DEFINE/SYSTEM/EXECUTIVE SYS$AUDIT_SERVER_INHIBIT YES

to SYLOGICALS.COM ?

Re: Audit file (disabling)

Hoff — Fri, 20 Mar 2009 15:27:42 GMT

The same way you get around most any other bug in the startup:

http://64.223.189.234/node/204

Boot conversationally (or you can boot minimally via the STARTUP_P1 parameter, in this case) and fix the startup and the rest of the environment to not include any references to physical device names.

Re: Audit file (disabling)

The Brit — Fri, 20 Mar 2009 15:37:48 GMT

You need to define the logical name

SYS$AUDIT_SERVER_INHIBIT = "TRUE"

before startup.com runs.

Do "Minimum" boot then login and define the logical. then Spawn a subprocess and run sys$system:startup

This should get you to the point where you can log in and adjust the startup so that Auditing doesn't automatically start. Dont quote me, but I think if this logical is defined in Sylogicals then it will be effective.

Dave.

Re: Audit file (disabling)

Craig A — Fri, 20 Mar 2009 17:07:06 GMT

Or, rather than turning auditing off when not set up your environment so that it can intelligently work out which disks are availble, where, re-point the various logicals and then start Audit Server (and others) as normal.

Craig

Re: Audit file (disabling)

Brad McCusker — Sat, 21 Mar 2009 09:43:32 GMT

I'm going to 2nd what Craig said. After you solve your problem with audit, aren't you are going to run head on into other problems?

What else is not going to be available becuase the SAN isn't there?

Brad McCusker
Software Concepts International
www.sciinc.com

Re: Audit file (disabling)

Wim Van den Wyngaert — Mon, 23 Mar 2009 08:10:00 GMT

You can also delete the file sys$system:vms$audit_server.dat. It will be re-created with default settings at startup.

$ set aud/server=exit
$ del ...
$ set aud/server=start
$ set aud/server=init

and then re-apply the settings.

Wim