HP OpenVMS Systems

ask the wizard
Content starts here

Security Auditing and processes in SUSPEND?

» close window

The Question is:

 
Here is what we are using:
 
Digital TCP/IP Services for OpenVMS VAX Version V4.2 - ECO 3 on a VAX
7000-720 running OpenVMS V6.2
 
With auditing turned on our network processes
often go into a SUSPENDED state.  Once we do
a:
     $set audit/alarm/disable=all
then the processes no longer get suspended.
 There is over a million blocks free on the disk which holds the audit
files.
 
Any ideas?
Thanks
Jean

The Answer is :

    Anything which blocks AUDIT messages will cause the AUDIT_SERVER
    process to go into a "tit-for-tat" state where any process which
    generates an audit alarm will be suspended. Thus if LOGIN audits
    are enabled, any new process will be SUSPENDED immediately.
 
    Although the most common cause of this state is filling the disk
    containing the audit journal, there are several other possibities.
    First, check that OPCOM is running and that OPCOM messages are flowing
    freely on OPA0, if enabled. Also check for any audit listener device.
    If there is one present, ensure that the listener process is working
    correctly.
 
    It may also be worth applying the latest audit server ECO. For V6.2
    that is currently VAXAUDS01_062.


  

     
     
answer written or last revised on ( 15-NOV-1999 )

     
» close window