I see some errors in syslog files in AIX. can these be ignored ?


 
Thread Tools Search this Thread
Operating Systems AIX I see some errors in syslog files in AIX. can these be ignored ?
# 1  
Old 12-16-2014
IBM I see some errors in syslog files in AIX. can these be ignored ?

Hello,

Could you please check the below errors. I found these errors in AIX LPAR syslogs.

Code:
auth|security:err|error sshd [pid]  error: Could not load host key: /etc/ssh/ssh_host_ecdsa_key

daemon:err|error syslog: slp: 0660-059 [pid] Impossible to get local interface for distant address 10.x.x.x. errno = 22.

daemon:err|error last message repeated 2 times
daemon:err|error syslog: slp: 0660-053 [pid] Function ID 107 is not supported.

daemon:err|error syslog: slp: 0660-065 [pid] Impossible to parse attribute (ca-uid=file:///var/opt/tivoli/ep/runtime/agent),(am-host=),(ca-ips=10.240.14.55),(ca-

basic-port=9510),(ca-cert-port=9510),(ca-version=1.4.2.2),(os-uid=9EF6CF84A07D11E296BB5CF3FCC9D664).
daemon:err|error syslog: slp: [pid] decode_srvreg -- __srv_reg_local failed with rc = -2.
daemon:err|error syslog: slp: 0660-084 [pid] The SA failed to decode and compute received message: Parse Error (-2).

user:err|error syslog: slp_srvreg : SLPServiceListener fails with SLP error no = -20.
user:err|error syslog: slp_srvreg : All of 3 tries to launch the SLP service listener failed. slp_srvreg will exit.
daemon:err|error syslog: slp: 0660-089 [pid] No IPv6 interface recorded for remote IPv6 address ::1.
daemon:err|error syslog: slp: 0660-077 [pid] SLPServiceListener -- The SA failed to initialize its sockets: Network Initialisation Failed (-20).
daemon:notice RMCdaemon[pid]: (Recorded using libct_ffdc.a cv 2):::Error ID: 6eKora0j0gmH/D/H/rs.w8....................:::Reference ID:  :::Template ID: 

a6df45aa:::Details File:  :::Location: RSCT,rmcd.c,1.94,239                          :::RMCD_INFO_0_ST The daemon is started.
  
auth|security:err|error sshd[pid]: error: Couldn't create pid file "/usr/local/etc/sshd.pid": A file or directory in the path name does not exist.


Is this a serious issue, that we need to do something ?

Thank you.
# 2  
Old 12-16-2014
You need to investigate each issue separately. For example, the first error

Code:
auth|security:err|error sshd [pid]  error: Could not load host key: /etc/ssh/ssh_host_ecdsa_key

could be resolved by generating the ecdsa key...
Code:
ssh-keygen -t ecdsa -b 521 -f /etc/ssh/ssh_host_ecdsa_key -N

however, did this always happen, did you upgrade ssh recently...there are a number of approaches and it's up to you to determine if you need to fix/work-around or understand the root cause. I suggest reviewing your /etc/syslog.conf and reducing levels of reporting to eliminate unnecessary reporting.


All of the slp (service location protocol...a framework) messages...are probably related to tivoli/systems director.
Code:
daemon:err|error syslog: slp: 0660-059 [pid] Impossible to get local interface for distant address 10.x.x.x. errno = 22.
daemon:err|error syslog: slp: 0660-053 [pid] Function ID 107 is not supported.
daemon:err|error syslog: slp: 0660-065 [pid] Impossible to parse attribute (ca-uid=file:///var/opt/tivoli/ep/runtime/agent),(am-host=),(ca-ips=10.240.14.55),(ca-
daemon:err|error syslog: slp: [pid] decode_srvreg -- __srv_reg_local failed with rc = -2.
daemon:err|error syslog: slp: 0660-084 [pid] The SA failed to decode and compute received message: Parse Error (-2).
user:err|error syslog: slp_srvreg : SLPServiceListener fails with SLP error no = -20.
user:err|error syslog: slp_srvreg : All of 3 tries to launch the SLP service listener failed. slp_srvreg will exit.
daemon:err|error syslog: slp: 0660-089 [pid] No IPv6 interface recorded for remote IPv6 address ::1.
daemon:err|error syslog: slp: 0660-077 [pid] SLPServiceListener -- The SA failed to initialize its sockets: Network Initialisation Failed (-20).

The slp_srvreg daemon is used by IBM Systems Director. IBM Systems Director is an administrative tool used for cross platform monitoring and managing.
The platform_agent starts the slp daemon and cimservices. If Systems Director is installed you will have the following two processes running on the machine:
Code:
/opt/freeware/cimom/pegasus/bin/cimssys platform_agent 
/opt/freeware/cimom/pegasus/bin/cimssys cimsys

If you are not using IBM Systems Director (which is usually the case) you can do the following to stop the daemons and eliminate the unwanted messages.
Code:
  # cp /etc/inittab /etc/inittab.bak  # vi /etc/inittab

Comment out the following two lines with a colon.
Code:
:platform_agent:2:once:/usr/bin/startsrc -s platform_agent >/dev/null 2>&1  
:cimservices:2:once:/usr/bin/startsrc -s cimsys >/dev/null 2>&1

Save the file.

Refresh the inittab file
Code:
 # telinit q  # stopsrc -s platform_agent # stopsrc -s cimsys

If you have slp_srvreg process running, kill process id if running.
The above steps should prevent slp from logging to syslog.
Code:
 # ps -ef |grep slp| grep -v grep
kill <pid>


Last edited by blackrageous; 12-16-2014 at 01:12 PM..
This User Gave Thanks to blackrageous For This Post:
# 3  
Old 12-16-2014
Thank you much for the reply. Appreciate your help with this.

Yeah, i started seeing the message/error very often after OS TL upgrade. (ssh also upgraded)

Could not load host key: /etc/ssh/ssh_host_ecdsa_key

I think, these keys were not generated by default. Now i created with "no paraphrase" option.

And we're not using system director, i got you on this.


Thank you. Smilie

Last edited by Kumar7997; 12-16-2014 at 03:05 PM..
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. AIX

Cannot send syslog event from AIX 6.1 to RHEL Syslog server

Hi everyone, I am trying to configure AIX 6.1 using syslogd to send syslog event to syslog server configured on RHEL. However, RHEL never receives the events. I have tried to redirect the syslog event on AIX to a local file and successful. Only forwarding to remote server fails. Firewall... (10 Replies)
Discussion started by: michael_hoang
10 Replies

2. HP-UX

Errors in syslog

These errors keep generating in the syslog which is quite annoying for monitoring for other errors as these are flooding it. Anyone know how to resolve these? Help appreciated. cimservera: user2netname: unknown nameservice ^I^I^I^I^Ifor publickey info 'ldap' Nov 19 13:31:30 server1 sshd:... (4 Replies)
Discussion started by: lcclaj0
4 Replies

3. Shell Programming and Scripting

Errors trying to use all files of a type

I am trying to create a code that will use all the bam files stored on a separate drive (/media/cmccabe/C2F8EFBFF8EFAFB9/pool_I_090215), run them in a program that I have changed the directory to, and the output gets re-directed to (/home/cmccabe/Desktop/NGS/pool_I_090215). I have tried the... (11 Replies)
Discussion started by: cmccabe
11 Replies

4. AIX

Link Errors in AIX

Hi Can any suggest me how to work on this particular issue i am facing. Below is the error message received on vio servers. IDENTIFIER TIMESTAMP T C RESOURCE_NAME DESCRIPTION 4B436A3D 0326102912 T H fscsi1 LINK ERROR 4B436A3D 0325212712 T H fscsi1 LINK ERROR 4B436A3D... (2 Replies)
Discussion started by: ganiiee
2 Replies

5. AIX

Multiple errors in AIX 5.3

Hi Admins, # lspath -H -l hdisk2 status name parent Enabled hdisk2 fscsi0 Enabled hdisk2 fscsi0 Missing hdisk2 fscsi2 Missing hdisk2 fscsi2 Enabled hdisk2 fscsi0 Enabled hdisk2 fscsi0 Enabled hdisk2 fscsi2 Missing hdisk2 fscsi2 Multi path IO status is shown as Missing for... (2 Replies)
Discussion started by: newaix
2 Replies

6. AIX

Syslog Errors

Cuando ejecuto cualquier comando con un usuario diferente al root en un equipo con AIX6.1, el syslog no me registra las acciones del usuario y en su defecto al usuario le reporta el mensaje Could not send msg SESSION = 426190, CMD = l . Please retry Esto ocurre para cualquier comando y... (1 Reply)
Discussion started by: salacho
1 Replies

7. AIX

AIX 5.3 Boot Errors

IBM P Series #7026 Error Codes #E47E212E - init #1BA70F4E - SRC #BA431EB7 - SRC #C69F5C9B- SYSPROC #369DO49B - SYSPFS This happens on reboot the core dump fills up the root file system so I don't think it completes the dump. I can't read the core file with dbx. Thanks (6 Replies)
Discussion started by: tholmes
6 Replies

8. Shell Programming and Scripting

checking ERRors in files

I m having trouble in a script.I need To write a script that will check for Following Errors in Logs Files,i.e files having Extension .log The erros are 2008-01-01 15:19:11,822 ERROR - ORA-01115: IO error reading block from file 51 (block # 717090) ORA-01110: data file 51:... (4 Replies)
Discussion started by: ali560045
4 Replies

9. AIX

C/C++ compiler ver 6 on AIX 5.3 - errors

Hi Guys, We are migrating AIX 5.1 to AIX 5.3. With this upgrade the C/C++ compiler is also upgraded to Visual Age C++ 6.0. After upgrading, when we tried to (re)compile our programs (since ibm open library classes are not going to work with new compiler), we are getting so many errors with no... (2 Replies)
Discussion started by: satguyz
2 Replies

10. Programming

detecting errors in writing to syslog

I am calling "void syslog(int, const char *, ...);" from my c++ application (definition taken from man page for syslog.h". Is there any way to detect that the syslog is not working, so that I can re-direct logging information to stderr? Thanks in advance. David (2 Replies)
Discussion started by: dmirza
2 Replies
Login or Register to Ask a Question