[SunHELP] syslog (WORKING, NOT SOLVED)

[Edward Chase]

I don't get it....

For some reason it started working after midnight last night/this morning...

bash-2.03$ head tacacs
May 27 00:01:38 PCtacs[10662]: [ID 637252 local6.info] server starting
May 27 00:01:38 PCtacs[10662]: [ID 326054 local6.info] validation request
from 10.1.1.17
May 27 00:01:38 PCtacs[10662]: [ID 560356 local6.info] login query for
<username> accepted
and so forth...

I've got newsyslog running each night just before midnight.  I'm not sure if
that has anything to do with it...  The weird thing is I've stopped/started
the syslog daemon and have also rebooted the machine since making these
changes.  I really don't see why last night just after midnight became the
magical time for this to start working again...



> -----Original Message-----
> From: sunhelp-bounces at sunhelp.org
> [mailto:sunhelp-bounces at sunhelp.org] On Behalf Of Jarrett Carver
> Sent: Wednesday, May 26, 2004 11:41 PM
> To: sunhelp at sunhelp.org
> Subject: RE: [SunHELP] syslog
>
>
> /var/log/tacacs.wtmp is the log file the tacacs proccess
> running you solaris
> box will write it's log output to.
>
> /var/log/tacacs is the log file that syslog will write all
> local6.info
> messages too.
>
> Have you tried running syslog with debugging on to see if
> there are syntax
> errors in the syslog.conf
>
> Have you tried soemthing like 'logger -p local6.info "Test
> Message" ' to see
> if syslog is handeling local6.info messages correctly?
>
> Which logging is not working?
>
> Jarrett Carver           http://www.geocities.com/solarboyz1
> solarboyz1 at hotmail.com   Unix/NT Systems Administrator
> ___________________________________________________________
> "When people sigh 'Life is hard', I am always tempted to
> ask 'compared to what?'".
>                - Sydney Harris
> ____________________________________________________________
>
>
>
>
> >From: "Edward Chase" <echase at studentweb.providence.edu>
> >Reply-To: The SunHELP List <sunhelp at sunhelp.org>
> >To: "'The SunHELP List'" <sunhelp at sunhelp.org>
> >Subject: [SunHELP] syslog
> >Date: Wed, 26 May 2004 11:46:28 -0400
> >
> >Hi there,
> >
> >I'm working on some final tweaks of a system I've rebuilt.
> >
> >I'm trying to get an app logging the way it used to.  Right now I'm
> >getting nothing.
> >
> > >From /etc/services (running version)
> >tacacs          49/udp
> > >From /a/etc/services (restored version)
> >tacacs          49/udp
> >
> > >From /etc/inetd.conf (running version)
> >tacacs  dgram   udp     wait    root
> /usr/local/bin/xtacacsd xtacacsd -d
> >-l -w/var/log/tacacs.wtmp
> > >From /a/etc/inetd.conf (restored version)
> >tacacs  dgram   udp     wait    root
> /usr/local/bin/xtacacsd xtacacsd -d
> >-l -w/var/log/tacacs.wtmp
> >
> > >From /etc/syslog.conf (running version)
> >local6.info     /var/log/tacacs
> > >From /a/etc/syslog.conf (restored version)
> >local6.info     /var/log/tacacs
> >
> >I'm a bit confused with the /var/log/tacacs versus
> /var/log/tacacs.wtmp
> >difference, but this was working 2 weeks ago.  Is there
> another piece
> >of this I am missing?
> >
> >Thanks.
> >--
> >Edward Chase
> >Providence College
> >Information Technology