Environment
Novell Audit 2.0.0
Novell Audit 2.0.1
Novell Audit 2.0.2
Situation
The nproduct.log file contains the following errors:
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]:
Failing primary connection for application Modular Authentication
Service.
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Failed SSL Certification
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Attempting to re-establish connection to secure log server for application eDirInst.
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Server reports logging protocol version: 4
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Failing primary connection for application eDirInst.
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Failed SSL Certification
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Attempting to re-establish connection to secure log server for application eDirInst.
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Server reports logging protocol version: 4
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Failing primary connection for application eDirInst.
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Failed SSL Certification
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Failed SSL Certification
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Attempting to re-establish connection to secure log server for application eDirInst.
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Server reports logging protocol version: 4
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Failing primary connection for application eDirInst.
Fri Jul 14 14:14:09 2006 [Novell Audit Platform Agent]: Failed SSL Certification
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Attempting to re-establish connection to secure log server for application eDirInst.
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Server reports logging protocol version: 4
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Failing primary connection for application eDirInst.
Fri Jul 14 14:17:14 2006 [Novell Audit Platform Agent]: Failed SSL Certification
How do you fix the above errors and problems?
Resolution
There are two different things that can be causing this
problem. They are as follows:
1.) The Log Application reporting the error is disabled
in the Secure Logging Server (SLS). What this means is that
instead of having a green dot next to the name of the application,
there is a red circle with a white horizontal dash through the
middle of it. What this means is that this application will
no longer be able to send data to the SLS. If the log
application is red, please do the following steps:
a.) Login to iManager. Typically this is done athttp:///nps/iManager.html .
b.) Click on the "Auditing and Logging" link.
Click on the "Logging Server Options". Browse to your Secure
Logging Server (SLS) object. Normally the SLS is located
in the "Logging Services" container just off of root. Once
you have your SLS, click on the "OK" button.
c.) Click on the "General" tab and select"Summary". Scroll down to the "Log Applications" section and
look for the log application that is in red and not green.
Click on the red button and make it turn green. Click on the"OK" or "Apply" button.
d.) Stop and start your SLS.
2.) If the Log Application (such as eDirectory) has a
green dot next to it but these messages continue to appear, it is
possible that the channel was recently enabled. If that is
the case, then shutdown and start the SLS (lengine). If the
SLS has been restarted and these errors persist, delete the log
application object and recreate it using the appropriate .LSC
file. Below are listed the steps on how to delete and
recreate your log application object.
a.) Login to iManager. Typically this is done athttp:///nps/iManager.html .
b.) Click on the "Auditing and Logging" link.
Click on the "Logging Server Options". Browse to your Secure
Logging Server (SLS) object. Normally the SLS is located
in the "Logging Services" container just off of root. Once
you have your SLS, click on the "OK" button.
c.) Click on the "Log Applications" tab. Put a
check mark next to the log application you wish to delete.
Click on the "Application Actions" link and click on"Delete". You may be prompted to confirm you
selection.
d.) Once the application has been deleted, put a check
mark next to "Applications" and click on the "Application Actions"
link. Select "New". Put in the name of the
application. Then browse out to where your LSC file is
contained. If you have a Novell Audit CD, the LSC files are
in the \NetWare\base\system\naudit directory. Some of the
names are edir_en.lsc (this is the log application for eDirectory),
win_en.lsc, sss_en.lsc, etc. Once you have selected your LSC
file, click on the OK button.
e.) Now that you have your log application installed,
shutdown and restart the SLS (lengine).