Environment
Novell Open Enterprise Server 2 (OES 2) Linux Support Pack 1
Novell ZENworks Server Management 7 Service Pack 1 Interim Release 3
SuSE Linux Enterprise Server 10 Support Pack 2
Situation
Observed apparmor running on machine because syslog service is not able to access MMS specific files which it needs. These
messages can be observed in "/var/log/messages"
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Changing permissions on special
file /dev/xconsole
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Cannot open file
/opt/novell/zenworks/bin/MajorLogFifo for writing (Permission denied)
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Changing permissions on special
file /dev/tty10
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Cannot open file
/opt/novell/zenworks/bin/MinorLogFifo for writing (Permission denied)
Oct 21 19:08:24 blr-srm-r4p kernel: klogd 1.4.1, log source = /proc/kmsg
started.
Oct 21 19:08:24 blr-srm-r4p syslog-ng[7699]: Cannot open file
/opt/novell/zenworks/bin/InfoLogFifo for writing (Permission denied)
Next, stop apparmor, using yast2 . Restart /etc/init.d/syslog restart and run
"/var/opt/novell/zenworks/zfs/mms/suse/novell-trapd restart"
messages can be observed in "/var/log/messages"
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Changing permissions on special
file /dev/xconsole
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Cannot open file
/opt/novell/zenworks/bin/MajorLogFifo for writing (Permission denied)
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Changing permissions on special
file /dev/tty10
Oct 21 19:08:19 blr-srm-r4p syslog-ng[7699]: Cannot open file
/opt/novell/zenworks/bin/MinorLogFifo for writing (Permission denied)
Oct 21 19:08:24 blr-srm-r4p kernel: klogd 1.4.1, log source = /proc/kmsg
started.
Oct 21 19:08:24 blr-srm-r4p syslog-ng[7699]: Cannot open file
/opt/novell/zenworks/bin/InfoLogFifo for writing (Permission denied)
Next, stop apparmor, using yast2 . Restart /etc/init.d/syslog restart and run
"/var/opt/novell/zenworks/zfs/mms/suse/novell-trapd restart"
From then on, traps are being sent from the agent machine to MMS
server machine on every restart of sshd service "/etc/init.d/sshd restart"
Resolution
Fixed in ZENworks 7 Server Management Service Pack 1 Interim Release 4 Hot Patch 2, see KB 3809227 "Updates to Novell ZENworks 7 Server Management" which can be found at https://www.novell.com/support
Additional Information
Based on the LAN trace, the snmp trap packets coming from the 64-bit agent machines seem to be malformed