Audit: problem with cron

[Olga_1]

Hello,

We have turned on the auditing and this morning I received the following message from cron:

Cron: Your job did not contain a valid audit ID.
See your system administrator.

What does it mean and how to fix it? Thank you very much.

[Uday_S_Ankolekar]

Is the box is trusted??
KB Doc explains...

The probable cause to this error is the .cronaids file. The error
message is sent to the server because /usr/spool/cron/.cronaids/root
file is missing. Check to make sure the .cronaids file in
place. If that file exists, double-check its content.

Here is a possible fix for the error:


1. Run tsconvert -p
This will build a file /usr/spool/cron/.cronaids with the data
the system needs

2. Then restart cron.
/sbin/init.d/cron stop
/sbin/init.d/cron start

-USA..

[Olga_1]

Thank you Uday,

Yes, the system is trusted.
The contents of the /usr/spool/cron/.cronaids/root:
0

And there is no tsconvert on the system.

Any ideas?

[Uday_S_Ankolekar · Accepted solution]

Try ../usr/lbin/tsconvert -p

-USA..

[James R. Ferguson]

Hi Olga:

To find 'tsconvert', do:

# whereis tsconvert

...should return '/usr/lbin/tsconvert'.

Regards!

...JRF...