LDAP-UX Client Services B.04.00 with Microsoft Windows 2000/2003 Active Directory Administrator's Guide

Administering LDAP-UX Client Services

Troubleshooting

Chapter 4 125

You may want to move the existing log ﬁle and start with an empty ﬁle:

mv /var/adm/syslog/local0.log

/var/adm/syslog/local0.log.save

Restart the syslog daemon with the following command: (Refer to

syslogd (1M)or details.)

kill -HUP ‘cat /var/run/syslog.pid‘.

Enabling and Disabling PAM Logging

When something is behaving incorrectly, enabling logging is one way to

examine the events that occur to determine where the problem is.

Complete the following steps to enable PAM logging on a particular

client. Refer to pam (1), pam.conf (4), and Managing Systems and

Workgroups for more information about PAM.

Step 1. Add the

debug

option to each line in /etc/pam.conf that contains

libpam_krb5.1. For example:

su account sufficient /usr/lib/security/libpam_krb5.1 debug

su account required /usr/lib/security/libpam_unix.1

...

Step 2. Edit the ﬁle /etc/syslog.confand add a new line at the bottom similar

to the following:

*.debug

<tab>

/var/adm/syslog/debug.log

Step 3. Restart the syslog daemon with the following command. (Refer to

syslogd (1M) for details.)

kill -HUP ‘cat /var/run/syslog.pid‘

Step 4. Once logging is enabled, run the HP-UX commands or applications that

exhibit the problem.

Step 5. Restore the ﬁle /etc/syslog.conf to its previous state to stop logging.

Step 6. Restart the syslog daemon with the following command: (Refer to

syslogd (1M) for details.)