Question:

What are the steps to enable debug logging for the DirectAudit agent for UNIX/Linux to send to Centrify Support?

Answer:

Use either section A) or B) depending on the version of the agent you are running (run dainfo -v to verify)

A) Turning on debug logging for the DirectAudit agent versions 3.1.1 and higher (dad process) running on Unix/Linux machines: 

Login as root or execute with privileged the following:

1. Turn on Centrify debug: 

# /usr/share/centrifydc/bin/addebug clear
# /usr/share/centrifydc/bin/addebug on
# /usr/sbin/dadebug clear 
# /usr/sbin/dadebug on
(If TRACE log is required, please run /usr/sbin/dadebug set TRACE)
Now dad agent will write debug information into a file "centrifydc.log" found under system's syslog directory.

2. Reproduce issue by restarting DirectAudit service:

# /etc/init.d/centrifyda restart

3. Collect adinfo and wait for it to complete:

# adinfo -t

4. Turn off debug:

# /usr/sbin/dadebug off
# /usr/share/centrifydc/bin/addebug off

5. Send to support the files:

a) /var/centrify/tmp/adinfo_support.tgz 
b) /var/centrifyda/tmp/support.tar.gz

6. If support is requesting a debug log for the DirectAudit Collector as well please follow the steps in:

KB-5727: How to enable debug logging for the DirectAudit Collector
 

B) Turning on debug logging for the DirectAudit agent versions 2.x-3.1.0 (dad process) running on Unix/Linux machines: 

1. Turn on Centrify debug:

# /usr/share/centrifydc/bin/addebug clear
# /usr/share/centrifydc/bin/addebug on
# /usr/sbin/dadebug clear 
# /usr/sbin/dadebug on
(If TRACE log is required, please run /usr/sbin/dadebug set TRACE)
Now dad agent will write debug information into a file "centrifydc.log" found under system's syslog directory.

2. Reproduce issue by restarting DirectAudit service:

# /etc/init.d/centrifyda restart

3. Collect information and wait for it to complete:

# adinfo -t
# dainfo --diag > /tmp/dainfo.txt
# ls –al /bin/ > /tmp/ls.out

4. Turn off debug:

# /usr/sbin/dadebug off
# /usr/share/centrifydc/bin/addebug off

5. Send to support the files:

a) /tmp/adinfo_support.tar.gz or /var/tmp/centrify/adinfo_support.tgz
b) /tmp/dainfo.txt
c) /var/log/centrifydc.log
d) /etc/centrifyda/centrifyda.conf
e) /tmp/ls.out

6. If support is requesting a debug log for the DirectAudit Collector as well please follow the steps in:

KB-5727: How to enable debug logging for the DirectAudit Collector