For AIX servers, when running command 'stopsrc -s centrifyda' to kill the Direct Audit daemon, it will just kill the service by SIGTERM. The file '/var/centrifyda/noautostart' will not get created.
Centrify Direct Audit determines whether to restart Direct Audit daemon by checking for the existence of the '/var/centrifyda/noautostart' file. When stopping Direct Audit daemon normally (not by crashing or killing the daemon), this file should be created. When the file was not created, it caused the Direct Audit daemon to restart automatically.
Workaround:
Need to make sure to run CentrifyDA script (/usr/share/centrifydc/bin/centrifyda) instead to start/stop Direct Audit daemon.