Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-10824 Running addebug with /var 100% full results in syslog corruption

Authentication Service ,  

27 July,18 at 10:19 AM


When /var is full during addebug is switched on, it results in the rsyslog.conf file will be overwritten with empty settings..

[root@lnxsrv003 var]# /usr/share/centrifydc/bin/addebug on

Configure /etc/systemd/journald.conf
Restart systemd journal daemon
/usr/share/centrifydc/bin/addebug: line 787: /var/centrify/tmp/syslog.addebug.5028: No space left on device
Configure /etc/rsyslog.conf
/usr/share/centrifydc/bin/addebug: line 811: /var/centrify/tmp/syslog.addebug.5028: No space left on device
/usr/share/centrifydc/bin/addebug: line 814: /var/centrify/tmp/syslog.addebug.5028: No space left on device
cat: /var/centrify/tmp/syslog.addebug.5028: No such file or directory
Send HUP signal to rsyslogd
/usr/share/centrifydc/bin/addebug: line 975: /var/centrify/tmp/centrifydc.addebug.5028: No space left on device
Configure log level in /etc/centrifydc/centrifydc.conf
mv: cannot stat ‘/var/centrify/tmp/centrifydc.addebug.5028’: No such file or directory
Reload /etc/centrifydc/centrifydc.conf
/usr/sbin/adreload returned 0
Centrify DirectControl debug logging is off

======Check rsyslog config file, it shows zero length and has been overwritten=======

[root@lnxsrv003 var]# cat /etc/rsyslog.conf
[root@lnxsrv003 var]# ls -l /etc/rsyslog.conf
rw-rr-. 1 root root 0 Mar 8 14:49 /etc/rsyslog.conf

In addebug script, we creates SYSLOG_CONF_tmp and switch it under /var centrify/tmp. When /Var is FULL , addebug cannot write into $SYSLOG_CONF_TMP which is in result of $SYSLOG_CONF shows empty input.

In Suite 2017.1 (5.4.1), addebug will examine disk space on /var before edit conf file. 
If /Var does not has enough space, it exits without changing SYSLOG_CONF. 

Fixed in Suite 2017.1 (5.4.1)