- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Bad Audit Flag
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-15-2011 02:59 AM
тАО06-15-2011 02:59 AM
Bad Audit Flag
When I tried login as root, I got the message "Bad Audit Flag". Its a trusted system. When I observeed the /tcb/files/auth/r/root file, I found below two lines missing.
:u_auditid#0:\
:u_auditflag#1:\
I was able to login once I placed these lines from another server root file.
Can anyone tell me what are those lines do exactly?
What are the numbers 0 and 1 in those lines exactly say? Because when I saw the password file of another user one of those numbers were different.
Kindly help me in understanding this.
Thanks in Advance!!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-15-2011 03:24 AM - last edited on тАО07-06-2011 10:22 AM by Kevin_Paul
тАО06-15-2011 03:24 AM - last edited on тАО07-06-2011 10:22 AM by Kevin_Paul
Re: Bad Audit Flag
Hi
http://h30499.www3.hp.com/t5/System-Administration/bad-audit-flag/m-p/2526208#M24384
Regards
Ajin.S
Ajin.S
Proverbs 3:5,6 Trust in the Lord with all your heart and lean not on your own understanding; in all your ways acknowledge him, and he will make all your paths straight.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-15-2011 03:28 AM
тАО06-15-2011 03:28 AM
Re: Bad Audit Flag
Yea I have checked it.
In one of my system, I checked the auditid for a user. It was 48 in the password file. But in the /etc/passwd, It was in line number 38.
Kindly help!!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-15-2011 04:10 AM
тАО06-15-2011 04:10 AM
Re: Bad Audit Flag
The audit id is stored within /tcb which is not present on a non-trusted system.
u_audid This field contains the audit ID for the user.
u_auditflag This field contains the audit flag for the user.
man prpwd
if auditing system is off is the same:
u_auditflag#1:\
u_auditflag#0:\
man audit
rgs,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-15-2011 10:28 PM
тАО06-15-2011 10:28 PM
Re: Bad Audit Flag
Thanks for your replies.
If these lines are found missing for any other user and due to which if i am not able to login, How will I be able to add these lines for tat particular user.
I will boot the server in single user mode. But where I can refer what's the audit if of the user.
Kindly help.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО06-15-2011 11:53 PM
тАО06-15-2011 11:53 PM
Re: Bad Audit Flag
What is the advantage of turning on the audit?
Is there any disadvantage if I turn off even?
As per my understanding, these entries will be there only if the audit is on?
Please help me in understanding!!!