| Title: | VAX and Alpha VMS |
| Notice: | This is a new VMSnotes, please read note 2.1 |
| Moderator: | VAXAXP::BERNARDO |
| Created: | Wed Jan 22 1997 |
| Last Modified: | Fri Jun 06 1997 |
| Last Successful Update: | Fri Jun 06 1997 |
| Number of topics: | 703 |
| Total number of notes: | 3722 |
OpenVMS VAX V6.1, BRS V1.4 This should be easy, BUT I can't find what's generating the %SECLGF message(the second OPCOM message belove). SECURITY_SERVER? Console Manager is checking for it at a customer site and last thursday the second OPCOM stopped arriving on their two main nodes in their BRS cluster. They still get both OPCOM's on their Quorum node, but only the LOGIN-F-INVPWD on two of them. I can't find the difference between the working node and the two others.... Any hints to get the %SECLGF message back? \�ge Example of how it used to look like on ALL nodes: ------------------------------------------------- Username: SYSTEM Password: <Giving an invalid PW> %%%%%%%%%%% OPCOM 18-FEB-1997 16:24:21.11 %%%%%%%%%%% Message from user AUDIT$SERVER on NJAARD Security alarm (SECURITY) and security audit (SECURITY) on NJAARD, system id: 20 26 Auditable event: Remote interactive login failure Event time: 18-FEB-1997 16:24:21.06 PID: 606000B4 Process name: _RTA2: Username: SYSTEM Terminal name: RTA2:, _RTA2:, NJAARD::SYSTEM Remote nodename: NJAARD Remote node id: 2026 (1.1002) Remote username: SYSTEM Status: %LOGIN-F-INVPWD, invalid password %%%%%%%%%%% OPCOM 18-FEB-1997 16:24:21.15 %%%%%%%%%%% Message from user SYSTEM on NJAARD %SECLGF, User on NJAARD::SYSTEM used an invalid password User authorization failure
| T.R | Title | User | Personal Name | Date | Lines |
|---|---|---|---|---|---|
| 215.1 | PolyCenter ??? | HAN::HALLE | Volker Halle MCS @HAO DTN 863-5216 | Wed Feb 19 1997 05:48 | 6 |
�ge,
some Polycenter software should be generating those %SECLGF messages.
Maybe it's not started/running anymore ?
Volker.
| |||||
| 215.2 | BRS$SAL generates SECLGF messages | OSLLAV::AGE_P | Aage Ronning, Oslo, Norway, (DTN 872-8464) | Wed Feb 19 1997 07:34 | 6 |
I found it: It's the BRS$SAL process that generates the messages.
The process are there, but I will restart BRS and Audit on all nodes...
Thanks for the hint, Volker.
\�ge
| |||||
| 215.3 | To Find Source, See What's Using OPER Privilege | XDELTA::HOFFMAN | Steve, OpenVMS Engineering | Wed Feb 19 1997 09:47 | 6 |
: I found it: It's the BRS$SAL process that generates the messages. : The process are there, but I will restart BRS and Audit on all nodes... When in doubt, turn on auditing of the use of OPER privilege, perform the logfail, and check the audits. :-) | |||||