AUDITD System Log Messages

This chapter describes messages with the AUDITD prefix. They are generated by the audit process (auditd), which notifies the RADIUS accounting server of user activity on the routing platform, such as login, logout, and execution of command-line interface (CLI) commands.

AUDITD_RADIUS_AV_ERROR

System Log Message

Unable to create type record: error-message

Description

The audit process (auditd) experienced the indicated error when building RADIUS attribute-value (AV) pairs for the indicated type of accounting request, which can be a login or logout event, or a command issued in the CLI.

Type

Error: An error occurred

Severity

error

Facility

LOG_DAEMON

AUDITD_RADIUS_OPEN_FAILED

System Log Message

function-name: unable to create RADIUS object handle (error-message)

Description

The audit process (auditd) could not create a RADIUS object handle, which it uses for various RADIUS operations.

Type

Error: An error occurred

Severity

emergency

Facility

LOG_DAEMON

AUDITD_RADIUS_REQ_CREATE_FAILED

System Log Message

Unable to create RADIUS request: error-message

Description

The audit process (auditd) could not create a RADIUS accounting request for the indicated reason.

Type

Error: An error occurred

Severity

error

Facility

LOG_DAEMON

AUDITD_RADIUS_REQ_DROPPED

System Log Message

Discarded Accounting-Request message; no RADIUS server responded

Description

The audit process (auditd) gathers information about system accounting events from other system processes and sends the information to RADIUS servers in an Accounting-Request message. The process repeatedly sent a message to all configured RADIUS servers without receiving a response, so it discarded the message.

Type

Error: An error occurred

Severity

error

Facility

LOG_DAEMON

Cause

The RADIUS accounting servers are not correctly configured or are unreachable, or the server applications are not responding.

AUDITD_RADIUS_REQ_SEND_ERROR

System Log Message

function-name: error-message

Description

The audit process (auditd) experienced the indicated error when it requested accounting information from a RADIUS server.

Type

Error: An error occurred

Severity

error

Facility

LOG_DAEMON

Cause

An internal software failure occurred.

Action

Contact your technical support representative.

AUDITD_RADIUS_REQ_TIMED_OUT

System Log Message

Retransmitted request to RADIUS server radius-server

Description

The audit process (auditd) gathers information about system accounting events from other system processes and sends the information to RADIUS servers in an Accounting-Request message. After failing to receive a response from the indicated server, auditd waited for a timeout period and resent the message.

Type

Error: An error occurred

Severity

error

Facility

LOG_DAEMON

Cause

The RADIUS server is not responding. Possible reasons include (a) the server machine is down, too busy, or unreachable (b) the server application is down or too busy (c) the shared RADIUS secret sent by auditd does not match the secret on the server.

AUDITD_RADIUS_SERVER_ADD_ERROR

System Log Message

Unable to add RADIUS server radius-server: error-message

Description

The audit process (auditd) read the RADIUS accounting server configuration, but could not add the indicated server to the internal structure used to track servers.

Type

Error: An error occurred

Severity

error

Facility

LOG_DAEMON

AUDITD_SOCKET_FAILURE

System Log Message

function-name: unable to operation socket (error-message)

Description

The audit process (auditd) listens on a Transmission Control Protocol (TCP) socket for system accounting events reported by other processes on the routing platform. The indicated socket operation failed with the indicated error.

Type

Error: An error occurred

Severity

emergency

Facility

LOG_DAEMON

Cause

An internal software failure occurred.

Action

Contact your technical support representative.