Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-2368: Centrify does not write to /var/log/centrifydc.log with "addebug on" & rsyslog

Authentication Service ,  

12 April,16 at 11:08 AM

Applies to: All versions of Centrify DirectControl earlier than 5.1 on Linux and Ubuntu platforms

Question:
The Centrify debug log /var/log/centrifydc.log is 0 bytes even after enabling debugging.

root@centrifydc-test-l-01:~# addebug on
No entry for terminal type "xterm";
using dumb terminal settings.
Configure /etc/rsyslog.conf
Send HUP signal to rsyslogd
Configure log level in /etc/centrifydc/centrifydc.conf
Reload /etc/centrifydc/centrifydc.conf
Centrify DirectControl debug logging is on

root@centrifydc-test-l-01:~# ll /var/log/centrifydc*
-rw-r--r-- 1 root root 2977 Mar 5 03:53 /var/log/centrifydc-install.log
-rw-r--r-- 1 root root 0 Mar 5 04:04 /var/log/centrifydc.log
 

The server in question is running rsyslogd. 

Is there any reason for this?

Answer:
This is a known issue noticed on some Ubuntu and CentOS platforms. The following steps need to be performed as root:

  1. Navigate to /var/log folder and change the ownership of centrifydc.log file from "root" to "syslog" and restart Centrify
​root@centrifydc-test-l-01:~# chown syslog /var/log/centrifydc.log 
  1.  Reproduce the issue as requested by Support
  2.  Check the file again:
​root@centrifydc-test-l-01:~# ll /var/log/centrifydc*
-rw-r--r-- 1 root root 2977 Mar 5 03:53 /var/log/centrifydc-install.log
-rw-r--r-- 1 syslog root 51525 Mar 5 04:06 /var/log/centrifydc.log

 

 

Related Articles

 articleKB-20210: Common Questions Regarding Centrify DirectControl and CoreOS articleKB-6041: How to show current license type in use by adclient articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-9213: How to have ldapproxy log to syslog without addebug on articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? articleKB-0564: How to Collect Debug Logs from a DirectAudit Agent articleKB-41209: Details on How Centrify Authentication Service Debug is Enabled