HP-UX Host Intrusion Detection System Version 4.4 Administrator Guide (5900-1634, April 2011)

F Error Messages
This appendix describes errors and messages that may be produced by the Agent and System
Manager programs. This appendix addresses the following topics:
• “Agent Messages” (page 199)
• “System Manager Messages” (page 203)
Agent Messages
This section describes error messages that are displayed on agent systems.
NOTE: These messages are produced by agent processes. If you see a message that is not
described and you cannot resolve the problem, contact HP support.
Table 56 Agent Error Messages
ActionMeaningError Message
See if the agent is already running
(ps -ef grep idsagent). If it is,
and you need to restart it, see
“Halting HP-UX HIDS Agents”
(page 48) and “Starting HP-UX HIDS
Agents” (page 44). If the agent is not
running, delete the lock file and
restart the agent.
You attempted to start idsagent and it is
already running. Or idsagent halted
abnormally, leaving the lock file in place.
idsagent: another idsagent
(PID:pid) process is running. Or a
stale lockfile
/var/opt/ids/idsagent.pid exists.
Remove it and attempt to restart -
exiting
Switch to user ids.You are currently logged in as superuser
(root). For security reasons, HP-UX HIDS
programs cannot be run as superuser.
idsagent: agent processes must
NOT be run as root - exiting
This error often occurs if the IDDS
driver in the kernel is not configured
correctly. Run the
IDS_checkInstall script, contact
HP support.
The idsagent encountered an unexpected
error, it halted the currently active
surveillance schedule.
idsagent: a critical error occurred
on the agent; halting schedule
execution
The idsagent refuses to open the
configuration file if it is not owned
by user:group ids:ids, is not readable
by user ids, or is world-writable.
Security checks on the configuration file
cfile failed.
idsagent: access checking on
configuration file cfile failed
Check that the directory exists, that
it is owned by user:group ids:ids; that
it has 700 permissions, and that the
/var partition has free space
available.
The idsagent failed to create the /var/
opt/ids/alert.log local alert log file.
idsagent: alert log creation failed
Ensure that dir exists, that it is
owned by user:group ids:ids, and
that it is readable and executable by
user ids.
The idsagent failed to change its current
working directory to dir
idsagent: cannot access its base
directory: dir
Verify that the file exists; that it is
owned by user:group ids:ids; and
that it is readable by user ids.
The idsagent cannot open the
configuration file cfile.
idsagent: cannot open configuration
file cfile
Check accompanying error messages
and correct the problem.
An error occurred while parsing the
ids.cf configuration file. The SSL
certificates may not have been created
properly, meaning that the REMOTEHOST
parameter may not be valid in ids.cf.
idsagent: failed to initialize
configuration module
Agent Messages 199