HP-UX Host Intrusion Detection System Release 4.1 Release Notes for HP-UX 11i v1 | HP-UX 11i v2 | HP-UX 11i v3

System Manager is restarted and attempts to load the schedules. An error dialog as
shown in Figure 1-1 (page 20) appears if there are incorrectly formatted template
property values when the GUI System Manager is started.
If a Surveillance Group is not successfully parsed when the GUI System Manager is
started, the group is removed from the schedule and the group will not appear in the
Schedule Manager window. If a schedule contains only the group that was removed,
then the GUI System Manager displays an error dialog stating that it was unable to
parse the schedule and the schedule will not appear in the System Manager and
Schedule Manager windows.
The following scenarios illustrate instances where the GUI Schedule Manager allows
administrators to make and save invalid modifications to pathname_X/program_X
filter template properties:
Example 1-1 Invalid Modification - Scenario 1
In this example, the GUI Schedule Manager allows the administrator to enter an unequal
number of pathnames_X and programs_X pathname groups:
pathnames_1 | file1 & file 2 | file3 | file4
programs_1 | prog1 | prog2
However, the administrator will not be able to activate the schedule as there is no
corresponding program for file4.
Example 1-2 Invalid Modification - Scenario 2
In this example, the GUI Schedule Manager allows the administrator to enter an empty
pathname or program when editing a pathnames_X or a programs_X template
property:
pathnames_1 | file1 | | file2
programs_1 | prog1 | prog2
As there is no valid pathname value between the two pipe delimiters , the GUI Schedule
Manager fails to parse the schedule when the administrator tries to activate it.
Diagnosing the Problem
Run the idsadmin --activate <schedule name> command to print useful
diagnostic information, including the line number of the schedule file entry that caused
a parsing error. The idsadmin command provides detailed error messages that can
help administrators diagnose and resolve the problem.
22 Announcement