HP-UX Host Intrusion Detection System Version 4.3 administrator guide

F Error Messages
This appendix describes errors and messages that may be produced by the Agent and System
Manager programs. This appendix addresses the following topics:
• “Agent Messages” (page 203)
• “System Manager Messages” (page 207)
Agent Messages
This section describes error messages that are displayed on agent systems.
NOTE: These messages are produced by agent processes. If you see a message that is not
described and you cannot resolve the problem, contact HP support.
Table F-1 Agent Error Messages
ActionMeaningError Message
See if the agent is already running
(ps -ef grep idsagent). If it is,
and you need to restart it, see
“Halting HP-UX HIDS Agents”
(page 54) and “Starting HP-UX
HIDS Agents” (page 51). If the agent
is not running, delete the lock file
and restart the agent.
You attempted to start idsagent and it is
already running. Or idsagent halted
abnormally, leaving the lock file in place.
idsagent: another idsagent
(PID:pid) process is running. Or a
stale lockfile
/var/opt/ids/idsagent.pid exists.
Remove it and attempt to restart -
exiting
Switch to user ids.
You are currently logged in as superuser
(root). For security reasons, HP-UX HIDS
programs cannot be run as superuser.
idsagent: agent processes must
NOT be run as root - exiting
This error often occurs if the IDDS
driver in the kernel is not configured
correctly. Run the
IDS_checkInstall script, contact
HP support.
The idsagent encountered an
unexpected error, it halted the currently
active surveillance schedule.
idsagent: a critical error occurred
on the agent; halting schedule
execution
The idsagent refuses to open the
configuration file if it is not owned
by user:group ids:ids, is not
readable by user ids, or is
world-writable.
Security checks on the configuration file
cfile failed.
idsagent: access checking on
configuration file cfile failed
Check that the directory exists, that
it is owned by user:group ids:ids;
that it has 700 permissions, and that
the /var partition has free space
available.
The idsagent failed to create the /var/
opt/ids/alert.log local alert log file.
idsagent: alert log creation failed
Ensure that dir exists, that it is
owned by user:group ids:ids, and
that it is readable and executable by
user ids.
The idsagent failed to change its current
working directory to dir
idsagent: cannot access its base
directory: dir
Verify that the file exists; that it is
owned by user:group ids:ids; and
that it is readable by user ids.
The idsagent cannot open the
configuration file cfile.
idsagent: cannot open
configuration file cfile
Check accompanying error messages
and correct the problem.
An error occurred while parsing the
ids.cf configuration file. The SSL
certificates may not have been created
properly, meaning that the REMOTEHOST
parameter may not be valid in ids.cf.
idsagent: failed to initialize
configuration module
Agent Messages 203