Tectia

Appendix C Log Messages

This appendix lists the log messages generated by Tectia Manager.

Management Agent configuration updated on <host-name>

Level: informational

Description: Management Agent configuration update was successful.

Management Agent configuration update failed on <host-name>: <error>

Level: error

Description: Management Agent configuration update was unsuccessful.

Configuration deployment failed: <error>

Level: error

Description: Configuration update was unsuccessful.

Denied connection for deleted host <host-name> from <ip-address>:<port>

Level: informational

Description: A host that has been deleted from Manager tried to establish a connection and was denied.

secsh ft log handler failed: <error>

Level: error

Description: Internal error, a file transfer log event handling was unsuccessful.

mft events log handler failed: <error>

Level: error

Description: Internal error, a file transfer log event handling was unsuccessful.

Configuration <config-type> update failed on <host-name>; will try again in <seconds> seconds

Level: informational

Description: A configuration update failed and will be retried.

Configuration <config-type> update failed on <host-name> after <number> tries; giving up

Level: notice

Description: A configuration update failed too many times and will not be retried.

Configuration <config-type> update failed on <host-name>: host has locally made configuration changes

Level: notice

Description: Locally made changes prevented the configuration update.

Configuration <config-type> update on <host-name> failed: <error>

Level: notice

Description: A configuration update failed.

Configuration <config-name> was edited during a CA renewal.

Level: informational

Description: A configuration edit interfered with a CA renewal affecting the same configuration.

Renewal for CA <ca-name> started.

Level: informational

Description: A CA renewal operation was started.

Maximum number of client/server configuration edit attempts exceeded in renewal for CA <ca-name>

Level: warning

Description: A CA renewal operation exceeded the number of permissible edits.

Renewal for CA <ca-name>: Deploying updated client/server configurations.

Level: informational

Description: A CA renewal operation starts to deploy affected configurations.

Renewal for CA <ca-name>: Client/server configurations need no editing, activating new CA certificate.

Level: informational

Description: A CA renewal operation proceeds as no configurations need editing.

Renewal for CA <ca-name>: Deployed updated client/server configurations up to required limit <number>

Level: informational

Description: A CA renewal operation starts to deploy a number of configurations.

Renewal for CA <ca-name>: Deactivating old CA certificate.

Level: informational

Description: A CA renewal operation is removing the old CA from use.

Renewal for CA <ca-name> finished.

Level: informational

Description: A CA renewal operation has been completed.

System clock is inconsistent: timestamp in the future.

Level: error

Description: Internal error, system timestamp is not acceptable.

System clock is inconsistent: timestamp too old.

Level: error

Description: Internal error, system timestamp is not acceptable.

The system timestamp is acceptable.

Level: informational System timestamp acceptable.

Description:

No valid CA object in revocation.

Level: error

Description: Internal error, an expected CA object was not found.

Certificate enrolled to <host-name>

Level: informational

Description: A certificate was enrolled to a host.

Revocation of certificate <serial-number> of CA <ca-name> failed.

Level: informational

Description: Internal error, a revocation of a certificate failed.

Certificate <serial-number> of CA <ca-name> revoked.

Level: informational

Description: A certificate was successfully revocated.

Revocation of certificate <serial-number> of <ca-name> failed. Status <error>

Level: informational

Description: Internal error, a revocation of a certificate failed.

Certificate <serial-number> of <ca-name> suspended.

Level: informational

Description: A certificate was suspended.

Certificate <serial-number> of <ca-name> revoked.

Level: informational

Description: A certificate was revoked.

All certificates of host <host-name> revoked (<number> in total).

Level: informational

Description: All certificates for a certain host were revoked.

All certificates older than <date-and-time> of host <host-name> revoked (<number> in total).

Level: informational

Description: All certificates for a certain host older than a certain period were revoked.

Certificate <serial-number> of <ca-name> reactivated.

Level: informational

Description: A suspended certificate was reactivated.

Failed to publish CRL for CRLDP #<crldp-id> of <ca-name>

Level: error

Description: Internal error, failed to publish a CRL.

CRL for CRLDP #<crldp-id> of <ca-name> published.

Level: informational

Description: A CRL was publiched.

CRL issue failed.

Level: error

Description: Internal error, failed to issue a CRL.

CRL number <number> of CRLDP #<crldp-id> issued by <ca-name>

Level: informational

Description: A CRL was issued by a CA.

CRLDP #<crldp-id> of <ca-name> issued late.

Level: warning

Description: A CRL was issued late by a CA.

CA <ca-name> configuration updated.

Level: informational

Description: A CA's configuration was modified.

Certificate issue failed.

Level: error

Description: Internal error, failed to issue a certificate.

Certificate <serial-number> issued by <ca-name>

Level: informational

Description: A CA issued a certificate.

<host-name>: Config files for <product> conflict - please upgrade to the same version

Level: warning

Description: Configuration file version mismatch

<host-name>: <product> <version> not supported for config update - please upgrade

Level: informational

Description: A configuration update was attempted for an unsupported product version.

<product> <config-type> configuration updated on <host-name>

Level: informational

Description: A configuration for a product was was updated.

<product> <type> configuration updated on <host-name> (configuration not validated)

Level: informational

Description: A configuration for a product was was updated but not validated.

<product> <type> configuration update failed on <host-name>: <error>

Level: error

Description: A configuration update was unsuccessful.

<product> <type> configuration update failed on <host-name>: <error>

Level: informational

Description: A configuration update was unsuccessful.

<product> <type> configuration update internal error on <host-name>: <error>

Level: error

Description: A configuration update was unsuccessful.

[<config-type>] configuration update: FCD `forget' successful

Level: informational

Description: A file change detection operation was successful for a config update.

<product> configuration update failed on host-name: <error>

Level: error

Description: A configuration update was unsuccessful.

Host key changed on <host-name>

Level: notice

Description: A host key change was detected.

Managed certificate change on <host-name>

Level: informational

Description: A managed certificate was changed on a host.

Certificate changed on <host-name>

Level: informational

Description: A certificate was changed on a host.

Managed certificate disappeared from <host-name>

Level: informational

Description: A managed certificate was removed from a host.

Certificate disappeared from <host-name>

Level: informational

Description: A certificate was removed from a host.

Host key update failed on <host-name> (<app-name> <app-version>): <error>

Level: informational

Description: A host key update for a host was unsuccessful.

secsh log handler failed: <error>

Level: error

Description: Internal error, log message handler for managed software failed.

Secure Shell server `<operation>' operation completed on <host-name>.

Level: informational

Description: A Secure Shell server operation was successful.

Secure Shell server `<operation>' operation failed on <host-name>.

Level: error

Description: A Secure Shell server operation was unsuccessful.

Unrecognized request `<request>' from <app-name> <app-version> on <host-name>

Level: informational

Description: An unsupported request was received from a managed software installation.

<product> <version> replaced by <product> <version> on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <version> upgraded to <version> on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <components> replaced by <components> on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <version> license type changed from `<license-type>' to `<license-type>' on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <version> product package changed from `<productpackage>' to `<productpackage>' on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <version> product information changed on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <version> detected on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <version> disappered on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

<product> <version> changed from `<versionsummary>' to `<versionsummary>' on <host-name>

Level: informational

Description: A change in a managed software installation was detected.

Operation failed repeatedly: <error>

Level: error

Description: The attempted operation has failed repeatedly with the given error.

Operation failed: <error>

Level: error

Description: Internal error, an internal operation failed repeatedly.

Internal operation restarted

Level: informational

Description: Internal event, an internal operation was automatically restarted.

Internal error: sysmonitor connect handling failed: <error>

Level: error

Description: Internal error, an error in management agent connection handling.

Host <host-name> has local configuration changes [<config-type>]

Level: notice

Description: Locally made changes were detected in a managed configuration.

Heartbeat <number>

Level: informational

Description: A periodic log message indicating that the Management Server is running correctly.

Initial configuration complete, restarting server

Level: notice

Description: The initial configuration of Management Server was completed.

Starting to update database from version <version>

Level: notice

Description: The database schema is being upgraded from an earlier version to a current version in Management Server software upgrade.

Database update finished.

Level: notice

Description: The database schema upgrade was successful.

Database upgrade failed!

Level: critical

Description: The database schema upgrade was unsuccessful.

Cannot connect to database.

Level: critical

Description: Failed to connect to the database.

DB failure debug: <debug-info>

Level: informational

Description: Error details about a failure to connect to a database.

Database does not contain version information.

Level: critical

Description: The database does not contain information about the schema version.

Incompatible database (version <version>) and server (version <version>)!

Level: critical

Description: The database version is incorrect for the Management Server version.

Could not read banner file <file-path> (check permissions?)

Level: notice

Description: The banner file for the login screen could not be read.

Could not resolve real path of <server-path>

Level: critical

Description: The path for the Management Server binary could not be determined.

Starting initial configuration

Level: notice

Description: The initial configuration operation of the Management Server is being started.

Disconnecting link <ip-address> (no keepalives received)

Level: informational

Description: A management agent link is not responding and is being disconnected.

Too many link connections - connection from <ip-address> denied

Level: notice

Description: Too many connections from a management agent link, further connections are being denied.

Protocol error: bad downlink LINK_AUTH packet

Level: notice

Description: Internal error.

SSH Management Agent downlink <ip-address> uses newer protocol than router - you must upgrade the downlink router

Level: notice

Description: Internal error.

Attempt to connect using unknown or expired link identification <link-id> from <ip-address>

Level: notice

Description: Internal error.

Invalid link authentication MAC from <ip-address>

Level: notice

Description: Internal error.

Failed to send LINK_AUTH_2 to link <ip-address>

Level: notice

Description: Internal error.

Got link authentication timeout from <ip-address>

Level: notice

Description: Internal error.

Protocol error: got downlink packet type <packet-type> while expecting LINK_AUTH_3

Level: notice

Description: Internal error.

Protocol error: bad downlink LINK_AUTH_3 packet from <ip-address>

Level: notice

Description: Internal error.

Protocol error: invalid link auth MAC from <ip-address> (LINK_AUTH_3)

Level: notice

Description: Internal error.

Limiting number of simultaneous links with the same identification to <number> (from <ip-address>)

Level: informational

Description: Too many management agent links from the same IP address, further links will be denied.

Got timeout while starting TLS from <ip-address>

Level: notice

Description: Internal error.

Failed to report registration status to client <ip-address> (could not send)

Level: notice

Description: Internal error.

Timeout with <ip-address> (link <link>)

Level: notice

Description: Internal error.

Protocol error: got unexpected packet type <packet-type> from downlink <ip-address>

Level: notice

Description: Internal error.

Protocol error: link packet type <packet-type> from <ip-address> has wrong routing prefix

Level: notice

Description: Internal error.

Protocol error: host is already registered with the same prefix

Level: notice

Description: Internal error.

Protocol error: received host register with intermediate hosts missing

Level: notice

Description: Internal error.

Protocol error: received application register with no intermediate host

Level: notice

Description: Internal error.

Protocol error: received packet type <packet-type> for non-existent connection

Level: informational

Description: Internal error.

Protocol error: received invalid HOST REGISTER packet from <ip-address>

Level: notice

Description: Internal error.

Internal error: host authentication timeout (did not get auth data) with <ip-address>

Level: notice

Description: Internal error.

Host register denied (identification not recognized) for <id> from <ip-address>

Level: informational

Description: A management agent tried to connect using an unrecognized identification.

Host register authentication failed for <id> - invalid MAC from <ip-address>

Level: notice

Description: Internal error.

Host authentication timed out (from <ip-address>:<port>)

Level: notice

Description: Internal error.

Protocol error: unexpected packet type <packet-type> from <ip-address>

Level: notice

Description: Internal error.

Protocol error: invalid packet type <packet-type> from <ip-address>

Level: notice

Description: Internal error.

Host authentication failed for <id> - invalid MAC from <ip-address>

Level: notice

Description: Internal error.

Internal error: no host connection found for app registration

Level: notice

Description: Internal error.

Protocol error: invalid outer structure in packet type <packet-type for <host-id> via <ip-address> (in app register)

Level: notice

Description: Internal error.

Invalid MAC in packet type <packet-type> for <id> via <ip-address>

Level: notice

Description: Internal error.

Protocol error: invalid encryption wrapper in packet type <packet-type> for <id> via <ip-address>

Level: notice

Description: Internal error.

Protocol error: outer and inner routing informations do not match in packet type <packet-type> for <id> via <ip-address>

Level: notice

Description: Internal error.

Protocol error: invalid packet type <packet-type> from <ip-address>

Level: notice

Description: Internal error.

Internal error: Connection callback called more than once, workaround enabled.

Level: notice

Description: Internal error.

Internal error: request via <ip-address>:<port> timed out but the request was not found

Level: notice

Description: Internal error.

Request via <ip-address>:<port> timed out

Level: informational

Description: Internal error.

Internal error: no host connection found for app conn

Level: notice

Description: Internal error.

Protocol error: invalid outer structure in packet type <packet-type> via <ip-address> (in conn packet loop)

Level: notice

Description: Internal error.

Invalid MAC in packet type <packet-type> via <ip-address>

Level: notice

Description: Internal error.

Protocol error: invalid encryption wrapper in packet type <packet-type> via <ip-address>

Level: notice

Description: Internal error.

Protocol error: outer and inner routing informations do not match in packet type <packet-type> via <ip-address>

Level: notice

Description: Internal error.

Protocol error: bad packet contents (type <packet-type>)

Level: notice

Description: Internal error.

Protocol error: received APPLICATION_NOTIFY with too small request id - possible replay attack

Level: notice

Description: Internal error.

Protocol error: invalid APPLICATION_REQUEST packet

Level: notice

Description: Internal error.

Protocol error: received APPLICATION_REQUEST with too small request id - possible replay attack

Level: notice

Description: Internal error.

Protocol error: bad OPERATION_COMPLETE packet

Level: notice

Description: Internal error.

Protocol error: bad OPERATION_PROGRESS packet

Level: error

Description: Internal error.

Protocol error: bad APPLICATION_TRANSFER packet

Level: notice

Description: Internal error.

Protocol error: bad APPLICATION_TRANSFER_DATA packet

Level: notice

Description: Internal error.

Protocol error: received less data than indicated for transfer (<number> vs. <number> bytes)

Level: notice

Description: Internal error.

Protocol error: packet contains unexpected offset (<number> vs. <number>)

Level: notice

Description: Internal error.

Protocol error: packet contains more data than is total len (<number> vs. <number>)

Level: notice

Description: Internal error.

Protocol error: unsupported packet type <packet-type> from <ip-address>

Level: informational

Description: Internal error.

Internal error: got connection notification with error: <error>

Level: informational

Description: Internal error.

Internal error: got connection notification without stream

Level: informational

Description: Internal error.

Load limiting dropped <number> incoming TCP connections during last <number> seconds

Level: notice

Description: Too many management agent connections were being processed at the same time and load limiting dropped some of them.

csm-audit: <audit-message>

Level: informational

Description: The Management Server generated an audit event.

<host>: <message>

Level: informational

Description: A received log message from managed software was copied to local syslog - this in optional feature and must be explicitly turned on.

Denied connection with expired ICB <auth-id>

Level: informational

Description: A management agent tried tried to connect using an expired Initial Configuration Block and was denied.

No host or ICB found for identification <auth-id>

Level: informational

Description: An Initial Configuration Block was not found for the authentication id used by a management agent and the connection was denied.

ICB <icb-name> not found in registration via <ip-address>:<port>

Level: error

Description: A registration from a management agent was received, but it didn't match an Initial Configuration Block and was denied.

SSH Tectia Manager restarted

Level: informational

Description: The Management Server was started.