HP-UX Host Intrusion Detection System Version 4.7 Administrator Guide HP-UX 11i v3 (766144-001, March 2014)

F Error Messages
This appendix describes errors and messages that may be produced by the Agent and System
Manager programs. This appendix addresses the following topics:
• “Agent Messages” (page 195)
• “System Manager Messages” (page 199)
Agent Messages
This section describes error messages that are displayed on agent systems.
NOTE: These messages are produced by agent processes. If you see a message that is not
described and you cannot resolve the problem, contact HP support.
Table 56 Agent Error Messages
ActionMeaningError Message
See if the agent is already running
(ps -ef grep idsagent). If it is,
You attempted to start idsagent and it is
already running. Or idsagent halted
abnormally, leaving the lock file in place.
idsagent: another idsagent
(PID:pid) process is running. Or a
stale lockfile and you need to restart it, see
/var/opt/ids/idsagent.pid exists. “Halting HP-UX HIDS Agents”
Remove it and attempt to restart -
exiting
(page 45) and “Starting HP-UX HIDS
Agents” (page 41). If the agent is not
running, delete the lock file and
restart the agent.
Switch to user ids.You are currently logged in as superuser
(root). For security reasons, HP-UX HIDS
programs cannot be run as superuser.
idsagent: agent processes must
NOT be run as root - exiting
This error often occurs if the IDDS
driver in the kernel is not configured
The idsagent encountered an unexpected
error, it halted the currently active
surveillance schedule.
idsagent: a critical error occurred
on the agent; halting schedule
execution correctly. Run the
IDS_checkInstall script, contact
HP support.
The idsagent refuses to open the
configuration file if it is not owned
Security checks on the configuration file
cfile failed.
idsagent: access checking on
configuration file cfile failed
by user:group ids:ids, is not readable
by user ids, or is world-writable.
Check that the directory exists, that
it is owned by user:group ids:ids; that
The idsagent failed to create the /var/
opt/ids/alert.log local alert log file.
idsagent: alert log creation failed
it has 700 permissions, and that the
/var partition has free space
available.
Ensure that dir exists, that it is
owned by user:group ids:ids, and
The idsagent failed to change its current
working directory to dir
idsagent: cannot access its base
directory: dir
that it is readable and executable by
user ids.
Verify that the file exists; that it is
owned by user:group ids:ids; and
that it is readable by user ids.
The idsagent cannot open the
configuration file cfile.
idsagent: cannot open configuration
file cfile
Check accompanying error messages
and correct the problem.
An error occurred while parsing the
ids.cf configuration file. The SSL
idsagent: failed to initialize
configuration module
certificates may not have been created
properly, meaning that the REMOTEHOST
parameter may not be valid in ids.cf.
Contact HP support.An internal error occurred while attempting
to reopen error reporting. The per-process
idsagent: failed to reopen stderr in
append mode
Agent Messages 195