Files getting deleted automaticaly

[KapilRaj]

Hi friends,

I am facing a problem in my HP 9000 700 BOX. HPUX 10.20 . It's some what funny by nature. I have an lvol which has my software/data resides in. What i observe is , my data is getting deleted automaticaly. I have NFS Installed. And i am quite sure none of my users would have done this.

Can any of u help me. Is there any patch for this ?

Kapil

[Karthik_2]

Kapil,
Make sure no one is mounting another filesystem on this directory .You can check ,in case to make sure ot the files getting deleted by comparing the bdf output.
Also u can check up if there is any disk related error in dmesg/syslog.

Karthik...

[Philip Chan_1]

Carefully review your cron jobs to make sure these software/data were not being removed un-intentionally. Pay extra attention to commands like "find ... rm ...".

That happened to our environments before, everybody claim that they didn't do it, but the cron jobs does.

Rgds,
Philip

[Marcel Boon]

Hi,

Is all your software/data deleted on your logical volume?
When is the data deleted? morning, evening ?
Give command "mount" and look for strange mount points.
If you can't find nothing, look at the crontab, just what Karthik wrote.
Look at the "root" history file and check it.

Marcel

[John Waller]

Hi,
You mentined the lvol is used as an NFS mount by other systems. Don't forget to also check any automated jobs which run on the remote machines.

[Paula J Frazer-Campbell]

Hi

Is this Lvol exported as Read/Write, if so then also look at the history files on the other systems, which are mounting this Lvol.

Be aware that nfs exports can be set to read only and also that the systems allowed to mount the exported Lvol can also be controlled. See man Nfs.

Further to other comments what are/were the permissions on the files which were deleted? As this will help to pinpoint the user level of the deletion.

Just a few ideas


Paula

[KapilRaj]

Thanks friends,

I will let u know the details , which few of my friends had asked for.

Can u tell me how to see the history log file & what does it contain?

Thanks in advance

Kapil

[Marcel Boon]

Hi,

The history log file can you find in the root dir. (/) This file is normally called .sh_history and could only be read as root. In this file you can see the previous that has been used by the root user.
cd /
cat .sh_history

Goodluck

Marcel

[KapilRaj]

thanks friends,

See my setup is with 20nos. of HP 9000 boxes all with 10.20 and on all the machines /etc/passwd and /etc/group files are the same.

All the file systems are exported & mounted on all the machines So as to provide mobility for any user ( Their home directory lies in the exported file systems).

So my doubt is , Is there any limit for concurrent connections for any exported file system. Is that a reason why this happens?.

Please give your valid suggestions

Thanks in advance

Kapil Raj

[Marcel Boon]

Hi Kapil,

We ask for more inforation see above.
Can you give us that info ?

dmesg
.sh_history
/var/adm/syslog/syslog.log

Marcel