Error 5 registering event 0 seen in the nproduct.log file

  • 7023090
  • 12-Jun-2018
  • 12-Jun-2018

Environment

eDirectory 9.1.x for Linux
eDirectory 9.0.x for Linux
eDirectory 8.8.8 for Linux

Situation

When attempting to configure Novell Audit of eDirectory events to a Sentinel server, no events were seen in Sentinel, and the following errors were seen in the /var/opt/novell/naudit/nproduct.log file:

Fri Jun  1 13:27:46 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun  1 13:27:46 2018 [eDirectory Instrumentation]: Error -1 registering event 5.
Fri Jun  1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun  1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event -1
.

Resolution

Start the eDir Collector on the Sentinel Server

Cause

In this particular situation, we found that the eDir Collector on the Sentinel Server was not running as expected.

Additional Information

In this particular situation, in the nproduct.log the Authentication with the Sentinel Server was successful. Yet, from a management model perspective, if the collector is shut down, the specific event source instance that ties to the connector is ALSO shut down. Therefore the event registration and processing failed.

Excert from the /var/opt/novell/naudit/nproduct.log:

Fri Jun  1 13:27:46 2018 [HandleConnection]: New connection on socket 55172
Fri Jun  1 13:27:46 2018 [Novell Audit Platform Agent]: eDirInst connecting to Log Server via SSL
Fri Jun  1 13:27:46 2018 [Novell Audit Platform Agent]: Authentication Successful
Fri Jun  1 13:27:46 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun  1 13:27:46 2018 [eDirectory Instrumentation]: Error -1 registering event 5.
Fri Jun  1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event 0.
Fri Jun  1 13:27:51 2018 [eDirectory Instrumentation]: Error 5 registering event -1
.