Centrify

Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-4317: How to stop INFO AUDIT_TRAIL messages that are writen to /var/log/messages without filtering them via syslog.conf on systems using syslog and not rsyslog

Authentication Service ,  

12 April,16 at 11:07 AM

Question:

How to stop  INFO AUDIT_TRAIL messages that are written to /var/log/messages without filtering them via syslog.conf on systems using syslog and not rsyslog?
The Steps from KB-2233: How to change log level? and KB-4108: How to reduce the logging of INFO AUDIT_TRAIL? does not resolve this issue.
 
After upgrading the Centrify DC agent from v4.x to v5.1.x or higher, it has resulted in a large increase in informational messages written to /var/log/messages by adclient. 

Answer:
Centrify DirectControl version 5.1 and higher introduced the logging of INFO AUDIT_TRAIL messages. This can lead to excessive logging causing the /var/log/messages file to become very large.

Customers should verify the steps included in KB-2111 and KB-4108 first.

If the steps from those KB's does not stem the  INFO AUDIT_TRAIL messages please do the following:
 
1. Add the following parameter to the /etc/centrifydc/centrifydc.conf file:
audittrail.targets: 0

2. Run adreload as root

This will stop the messages as setting 'audittrail.targets 0' in the configuration file makes logging be more like the logging in the version 4 agent as the 4 agent did not include the audit trail logging. 
 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.

Related Articles

 articleKB-6041: How to show current license type in use by adclient articleKB-6040: How to change the license type in use after adclient successful joined to the AD? articleKB-6073: How to join the Linux/Unix Centrify Server to Active Directory with specific Computer Role? articleKB-6056: How to report the group policy settings that are in effect for the local computer? articleKB-6038: How to specify the license type to use when joining the server to AD using adjoin? article[HOWTO] reduce the logging of INFO AUDIT_TRAIL? article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part I article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part II article[How To] Enable Symantec VIP MFA for Centrify Server Suite on Linux Part III