problem with onshowaudit

Posted in 2010

Summary

User on IDS 11.50.FC6W3 found that 'onshowaudit -l' failed with "The directory name specified by the ADTPATH configuration parameter does not exist or does not have the necessary permissions", while 'onshowaudit -f <auditfile>' worked fine. Responders asked him to check ADTPATH via 'onaudit -c' and the adtcfg file (both showed /export/home/informix/aud) and then to check the directory listing and permissions, which were informix:informix with mode 770 and contained the audit files. The thread ends there with no resolution recorded.

Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.

Topics: Security, Permissions & Auditing, Versions, Editions & End-of-Life

KHURRAM SHAHZAD — Thu, 05 Aug 2010 13:34:39 — source: IIUG Forums & Mailing Lists

when i am using onshowaudit -l command its giving following error while onshowaudit -f /export/home/informix/aud/ids_mcp_qa2.2 is working fine onshowaudit -l ONSHOWAUDIT Secure Audit Utility INFORMIX-SQL Version 11.50.FC6W3 The directory name specified by the ADTPATH configuration parameter does not exist or does not have the necessary permissions.

↪ replying to KHURRAM SHAHZAD

Obnoxio The Clown — Thu, 05 Aug 2010 13:45:04 — source: IIUG Forums & Mailing Lists

KHURRAM SHAHZAD wrote: > when i am using onshowaudit -l command its giving following error while > onshowaudit -f /export/home/informix/aud/ids_mcp_qa2.2 is working fine > > onshowaudit -l > ONSHOWAUDIT Secure Audit Utility > INFORMIX-SQL Version 11.50.FC6W3 > The directory name specified by the ADTPATH configuration parameter does not > exist or does not have the necessary permissions. And in your onconfig, what is the parameter ADTPATH set to? -- Cheers, Obnoxio The Clown http://obotheclown.blogspot.com I will now proceed to pleasure myself with this fish. -- This message has been scanned for viruses and dangerous content by OpenProtect(http://www.openprotect.com), and is believed to be clean.

↪ replying to KHURRAM SHAHZAD

Fernando Nunes — Thu, 05 Aug 2010 13:57:17 — source: IIUG Forums & Mailing Lists

Check "onaudit -c" Regards. On Thu, Aug 5, 2010 at 2:34 PM, KHURRAM SHAHZAD <kshahzad02@i2cinc.com>wrote: > when i am using onshowaudit -l command its giving following error while > onshowaudit -f /export/home/informix/aud/ids_mcp_qa2.2 is working fine > > onshowaudit -l > ONSHOWAUDIT Secure Audit Utility > INFORMIX-SQL Version 11.50.FC6W3 > The directory name specified by the ADTPATH configuration parameter does > not > exist or does not have the necessary permissions. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently... --0015175770ba858609048d13ed56

↪ replying to Fernando Nunes

KHURRAM SHAHZAD — Thu, 05 Aug 2010 14:54:50 — source: IIUG Forums & Mailing Lists

$onaudit -c Onaudit -- Audit Subsystem Configuration Utility Current audit system configuration: ADTMODE = 1 ADTERR = 0 ADTPATH = /export/home/informix/aud ADTSIZE = 50000 Audit file = 5 $vi adtcfg.2 #************************************************************************** # # Licensed Material - Property Of IBM # # "Restricted Materials of IBM" # # IBM Informix Dynamic Server # (c) Copyright IBM Corporation 1996, 2008 All rights reserved. # # Title: adtcfg # Description: IBM INFORMIX Dynamic Server Audit Configuration file. # IBM IDS will read this file when a server is either # initialized or restarted and will configure the audit # subsystem according to the values herein. Audit # Analysis Officer has the responsibility of updating # this file with values suitable for the specific instance. # # IBM INFORMIX Dynamic Server will write the file # adtcfg.<server_number> with any changes to the values # of these parameters within the instance. # #************************************************************************** ADTMODE 1 # Auditing mode ADTPATH /export/home/informix/aud # Directory where audit trails will be written by OnLine ADTSIZE 50000 # Maximum size of any single audit trail file ADTERR 0 # Error handling modes.

↪ replying to KHURRAM SHAHZAD

Obnoxio The Clown — Thu, 05 Aug 2010 14:56:54 — source: IIUG Forums & Mailing Lists

KHURRAM SHAHZAD wrote: And what happens when you "ls -l /export/home/informix/aud" ? -- Cheers, Obnoxio The Clown http://obotheclown.blogspot.com I will now proceed to pleasure myself with this fish. -- This message has been scanned for viruses and dangerous content by OpenProtect(http://www.openprotect.com), and is believed to be clean.

↪ replying to Obnoxio The Clown

KHURRAM SHAHZAD — Thu, 05 Aug 2010 14:59:54 — source: IIUG Forums & Mailing Lists

$ ls -lhrt -rw-rw---- 1 informix informix 4.6K Aug 5 17:34 ids_mcp_qa2.0 -rw-rw-r-- 1 root informix 0 Aug 5 17:36 jvp.log -rw-rw---- 1 informix informix 49K Aug 5 18:25 ids_mcp_qa2.1 -rw-rw---- 1 informix informix 18K Aug 5 18:40 ids_mcp_qa2.2 -rw-rw---- 1 informix informix 49K Aug 5 19:33 ids_mcp_qa2.3 -rw-rw---- 1 informix informix 19K Aug 5 19:42 ids_mcp_qa2.4 -rw-rw---- 1 informix informix 26K Aug 5 19:58 ids_mcp_qa2.5

↪ replying to KHURRAM SHAHZAD

Obnoxio The Clown — Thu, 05 Aug 2010 15:02:54 — source: IIUG Forums & Mailing Lists

KHURRAM SHAHZAD wrote: > $ ls -lhrt > -rw-rw---- 1 informix informix 4.6K Aug 5 17:34 ids_mcp_qa2.0 > -rw-rw-r-- 1 root informix 0 Aug 5 17:36 jvp.log > -rw-rw---- 1 informix informix 49K Aug 5 18:25 ids_mcp_qa2.1 > -rw-rw---- 1 informix informix 18K Aug 5 18:40 ids_mcp_qa2.2 > -rw-rw---- 1 informix informix 49K Aug 5 19:33 ids_mcp_qa2.3 > -rw-rw---- 1 informix informix 19K Aug 5 19:42 ids_mcp_qa2.4 > -rw-rw---- 1 informix informix 26K Aug 5 19:58 ids_mcp_qa2.5 ls -l . What are the permissions on the directory? -- Cheers, Obnoxio The Clown http://obotheclown.blogspot.com I will now proceed to pleasure myself with this fish. -- This message has been scanned for viruses and dangerous content by OpenProtect(http://www.openprotect.com), and is believed to be clean.

↪ replying to Obnoxio The Clown

KHURRAM SHAHZAD — Thu, 05 Aug 2010 15:06:40 — source: IIUG Forums & Mailing Lists

permission is 770 on directory drwxrwx--- 2 informix informix 512 Aug 5 19:43 aud