Understanding Sun Cluster HA for Sybase ASE Logging and Security Issues

The following sections contain information about Sun Cluster HA for Sybase ASE logging and security issues.

Sun Cluster HA for Sybase ASE Logging

The Sun Cluster HA for Sybase ASE data service logs messages to the file message_log in the /opt/SUNWscsyb/log directory. Although this file cannot exceed 512 Kbytes, the Sun Cluster HA for Sybase ASE data service does not delete old log files. The number of log files, therefore, can grow to a large number.

The Sun Cluster HA for Sybase ASE data service writes all error messages in the syslog file. The Sun Cluster HA for Sybase ASE data service also logs fault-monitor history to the file restart_history in the log directory. These files can also grow to a large number.

As part of your regular file maintenance, check the following log files and remove files that you no longer need.

• syslog

• message_log

• restart_history

Important Security Issues

The Sun Cluster HA for Sybase ASE data service requires that you embed the system administrator's password in a stop file. The /opt/SUNWscsyb directory contains the template for the stop file, Sybase_stop_servers. The Sun Cluster HA for Sybase ASE data service uses this file to log in to the Sybase ASE environment and to stop the Sybase ASE servers. Enable the sybase_id user to execute the stop file, but protect the file from general access. Give read, write, and execute privileges to only the following users.

• sybase_id user

• sybase_id group