NTP Works Fine,But I cannot see it in PS NTP

[Volker Halle]

Prem,

the TCPIP$NTP_1 process should be started automatically, when you issue the TCPIP ENABLE SERVICE NTP command. You should see the CREPRC audit alarm at that time.

Did you completely disable and delete NTP including the TCPIP$NTP account ?

You can turn on image accounting with

$ SET ACC/ENABLE=IMAGE

You look at the accouting records with:

$ ACC/FULL/SINCE=date-and-time

Volker.

PS: I'm a the DECUS IT Symposium in Nuernberg this week, so I may not have a lot of time to answer your questions. Please be patient.

[Prem Mohan]

Hi volker,
I used the tcpip$config to disable and stop and enable and start the NTP.

I did see the audting alarm which I posted earlier

%%%%%%%%%%% OPCOM 16-APR-2007 14:56:19.04 %%%%%%%%%%%
Message from user AUDIT$SERVER on XXXXX
Security alarm (SECURITY) on XXXX, system id: 63184
Auditable event: Process created ($CREPRC)
Event time: 16-APR-2007 14:56:19.04
PID: 0000BE4E
Process name: TCPIP$NT_BG9458
Username: TCPIP$NTP
Process owner: [TCPIP$AUX,TCPIP$NTP]
Image name: $1$DKC0:[SYS0.SYSCOMMON.][SYSEXE]TCPIP$NTP.EXE
New PID: 0000BE4F
New process name: TCPIP$NTP_34160 <<<<<<<<< This is not seen
New process owner: [TCPIP$AUX,TCPIP$NTP]
New image name: SYS$SYSTEM:LOGINOUT
Posix UID: -2
Posix GID: -2 (%XFFFFFFFE)

I did not disable the TCPIP$NTP account.I will try that and let you know.
I was pulled for something else.

Best Regards
Prem.

[Volker Halle]

Prem,

when you TCPIP ENABLE SERVICE NTP, you should see a CREPRC audit alarm. TCPIP$NETACP should be creating the TCPIP$NTP_1 process. That's how it's supposed to happen.

Volker.