%SHOW-W-NOAUDITING, security auditing disabled; no events will be logged

[Paul Whapshott]

I rebooted my ES45 VMS 7.3-2 servers at the weekend.

All Servers came back up and I did not see any errors on reboot.

When I interrogate the audit file for yesterday it was empty!.

A Show audit returned the above message.

I have got it working again by doing a
set audit/init.

Q: Why did this happen ? baring in mind it was common between 3 separate VMS servers that had been rebooted!


Thanks for any ideas ,

Paul

[Karl Rohwedder]

Paul,

perhaps the logical SYS$AUDIT_SERVER_INHIBIT is defined somewhere in the startup?

No messages regarding AUDITING on the console?

regards Kalle

[Wim Van den Wyngaert]

Was the disk on which the audit file is placed available during boot ?

Wim

[Dean McGorrill]

did someone issue a set audit/server=exit.
its usually pretty stubborn about staying
up. Dean

[John Gillings]

Paul,

Make sure the file VMS$AUDIT_SERVER.DAT (by default in SYS$MANAGER) is PHYSICALLY common across all nodes in the cluster.

This file controls the audit configuration, and if different nodes have different "views", all kinds of things can fail. Worse, if you have a misconfigured cluster, SET AUDIT commands may apparently work, and be stable until a reboot. Similarly, SYS$SYSTEM:VMS$OBJECTS.DAT should be common.

If you find it's misconfigured, stop auditing on all nodes. Define the logical names VMS$AUDIT_SERVER and VMS$OBJECTS to point to the (a?) set of common files then restart auditing. Check and/or reconfigure any local changes you may have made.

[Thomas Ritter]

Pau, we also have ES45 with 7.3-2. In our system startups we disable then enable. Always.

In sylogicals

$ define/system/exec SYS$AUDIT_SERVER_INHIBIT YES !Switch of Auditing. Enable Audit end of SYSTARTUP_VMS.COM

in systartup_vms

--------------------------------------------------------------------------------
...ENABLE AUDIT Server messages

$ set audit/server=start
$ wait 00:00:10
$ set audit/server=initiate
$!
$!

[Ian Miller.]

Thomas,
" Pau, we also have ES45 with 7.3-2. In our system startups we disable then enable. Always."

Why?