Environment
eDirectory 9.1.x for Linux
eDirectory 9.0.x for Linux
eDirectory 8.8.8 for Linux
eDirectory 9.0.x for Linux
eDirectory 8.8.8 for Linux
Situation
When attempting to configure Novell Audit of eDirectory events to a Sentinel server, no events were seen in Sentinel, and the following errors were seen in the /var/opt/novell/naudit/nproduct.log file:
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error -1 registering event 5.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event -1.
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error -1 registering event 5.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event -1.
Resolution
Start the eDir Collector on the Sentinel Server
Cause
In this particular situation, we found that the eDir Collector on the Sentinel Server was not running as expected.
Additional Information
In this particular situation, in the nproduct.log the Authentication with the Sentinel Server was successful. Yet, from a management model perspective, if the collector is shut down, the specific event source instance that ties to the connector is ALSO shut down. Therefore the event registration and processing failed.
Excert from the /var/opt/novell/naudit/nproduct.log:
Fri Jun 1 13:27:46 2018 [HandleConnection]: New connection on socket 55172
Fri Jun 1 13:27:46 2018 [Novell Audit Platform Agent]: eDirInst connecting to Log Server via SSL
Fri Jun 1 13:27:46 2018 [Novell Audit Platform Agent]: Authentication Successful
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error -1 registering event 5.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event -1.
Excert from the /var/opt/novell/naudit/nproduct.log:
Fri Jun 1 13:27:46 2018 [HandleConnection]: New connection on socket 55172
Fri Jun 1 13:27:46 2018 [Novell Audit Platform Agent]: eDirInst connecting to Log Server via SSL
Fri Jun 1 13:27:46 2018 [Novell Audit Platform Agent]: Authentication Successful
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:46 2018 [eDirectory Instrumentation]: Error -1 registering event 5.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun 1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event -1.