Applies to:
Centrify DirectControl on Linux, Unix system running syslog-ng
Question:
Why I am getting the following error when I run 'addebug on'? ERROR: /etc/syslog.conf not found. Operation cancelled.
Answer:
Addebug script checks for the existence of a syslog pid file in /var/run directory. For system that is running syslog-ng, syslog config file is written as /etc/syslog-ng/syslog-ng.conf but not /etc/syslog.conf and pid file as /var/run/syslogd.pid. Addebug failed because it could not find config is /etc/syslog.conf.
Workaround:
Rename /var/run/syslogd.pid to /var/run/syslog-ng.pid. This way your script finds syslog-ng.pid and able to correctly update syslog-ng.config file.
In addition, please take a back up of your existing syslog-ng.conf file and add the following lines and restart syslog (service syslog-ng restart)
====================================================================
filter f_centrify_re {
( program("adnisd") or program("adclient") )
and priority(debug..emerg);
};
######
destination d_centrify_re {file("/var/log/centrifydc.log");};
# destinations
log {
source(s_local);
source(s_kernel);
filter(f_centrify_re);
destination(d_centrify_re);
};
==============================================================================
A sample file is attached at the end of this KB article. Pl. use it as reference only.
Resolution:
None