1837932 Members
2664 Online
110124 Solutions
New Discussion

vaild audit id

 
Crystal_1
Frequent Advisor

vaild audit id

The system was turned to be trusted. However, after that a cronjob for sybase was not working. The error message is as follows:

Cron: Your job did not contain a valid audit ID. See your system administrator.

Could anyone tell me what is the meaning of valid audit ID and how can I fix it without truning off the trusted system?

Thanks
5 REPLIES 5
Helen French
Honored Contributor

Re: vaild audit id

Deshpande Prashant
Honored Contributor

Re: vaild audit id

Hi
Re-build your .cronaids file with folloding command.

#tsconvert -p

This will build a /usr/spool/cron/.cronaids with the data that system needs.

Then restart cron.
/sbin/init.d/cron stop
/sbin/init.d/cron start

Thanks.
Prashant Deshpande.



Take it as it comes.
Crystal_1
Frequent Advisor

Re: vaild audit id

Thanks guys,

Our system admin did it in his way as follows:

created directory /.secure/etc
created file "audnames" within /.secure/etc
turned of auditing by issuing: audsys -f
removed /.secure/etc/audnames
stopped cron by issuing /sbin/init.d/cron stop
started cron by issuing /sbin/init.d/cron start

I am doubting this because he truned the C2 back to be untrusted. You guys think this is appropriate?

Crystal
Deshpande Prashant
Honored Contributor

Re: vaild audit id

HI
If the system is back to non-trusted, then I don't think you will have problem.
For system to be trusted you need the /usr/spool/cron/.cronaids file with valid data.
Thanks.
Prashant Deshpande.
Take it as it comes.
Froylan Mendez
Occasional Contributor

Re: vaild audit id

Crystal your procedure helpme for server Non-Trusted with same emails messages

Thanks

regards


created directory /.secure/etc
created file "audnames" within /.secure/etc
turned of auditing by issuing: audsys -f
removed /.secure/etc/audnames
stopped cron by issuing /sbin/init.d/cron stop
started cron by issuing /sbin/init.d/cron start