http://forums.novell.com/ en Sun, 22 Nov 2009 12:02:11 GMT vBulletin 60 http://forums.novell.com/images/ca_serenity/misc/rss.jpg http://forums.novell.com/ http://forums.novell.com/novell-product-support-forums/audit/393233-some-events-fail-inserted-into-oracle-db-ora-0148-a.html Thu, 19 Nov 2009 08:13:14 GMT Hello, Can please someone help. We have configured Novell Audit by following the instruction on Novell Documentation... Hello,

Can please someone help. We have configured Novell Audit by following the instruction on Novell Documentation.

Everything was successful, the NAUDITLOG table is created and also some events are inserted. But unfortunately there seems to be an event that creates this Oracle error:

ORA-01480: trailing null missing from STR bind value

From the nproduct.log this information can be found:

*******************************************
Thu Nov 19 14:09:30 2009 [LGDORA]: [1480] ORACLE_ERROR_MSG:[ORA-01480: trailing null missing from STR bind value]
Thu Nov 19 14:09:30 2009 [LGDORA]: [WARNING] SQL statement execution failed: ""
Thu Nov 19 14:09:30 2009 [LGDORA]: [CRITICAL] An event sent to "oracleChannelTest" could not be processed
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] _____Event_START_____
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Table(9)="NAUDITLOG"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] SourceIP(0x0A1E0A53)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] ClientTimestamp(1258610905.7)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] ServerTimestamp(1258610917)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] SessionID(1)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Component(26)="Nsure Audit\Configuration"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] ID(0x00010004)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Severity(7)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] GroupID(0)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Originator(0)=(0),"NULL"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Target(0)=(0),"NULL"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] SubTarget(0)="NULL"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Text1(71)="Logging Services\Applications\SSLVPN provided by Novell Access Manager rfé[ùh<87>bÃŒ<98>PÑ<8a>SDÔA¢·UOÃ*zÂ^E^Bî(Qðln< 9b><92>Ã<8d>ÃéÚ^OM<87>^N³SL^TÃ<94>KÑ<87><82>¿ qM@Æ<95>ú"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Text2(0)="NULL"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Text3(0)="NULL"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Values=1(1),2(0),3(0)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] MIMEHint(0)
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Data(0)="NULL"
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] Signature(89)="cmbpW/loh2LMmFDRilNE1EGiNfaTt1VP7XrCBQLuKFHwbG6bkt1ujc/p2g9Nhw6zU0wU0JRL0YeCv3FNQMaV+g=="
Thu Nov 19 14:09:30 2009 [LGDORA]: [INFO] _____Event_END_____
Thu Nov 19 14:09:30 2009 [Novell Audit]: Event could not be logged; driver failed. Waiting for driver to recover.
Thu Nov 19 14:09:30 2009 [Novell Audit]: Exiting SLS cause of Oracle Channel Failure
*******************************************

And then the Audit logging shuts down automatically.

Would be great if you could, helps :)


Regards,
Roger ]]> Audit Roger_Sz http://forums.novell.com/novell-product-support-forums/audit/393233-some-events-fail-inserted-into-oracle-db-ora-0148-a.html http://forums.novell.com/novell-product-support-forums/audit/393183-free-included-auditing.html Wed, 18 Nov 2009 20:09:13 GMT One USED to get basic Nsure Audit for free (you could pay more if you needed certain things to be audited) However, that product is EOL. Seems... One USED to get basic Nsure Audit for free (you could pay more if you needed certain things to be audited)

However, that product is EOL.

Seems the replacements are either
Identity Audit
and/or Sentinel

But neither seem to be free or included (starter pack, etc.)

Is that true?

So now the only way to get auditing (of any type) is to buy Identity Audit/Sentinel or third party?

OES2 SP1 Linux (as of now) ]]> Audit kjhurni http://forums.novell.com/novell-product-support-forums/audit/393183-free-included-auditing.html