After spending more time on it, I found that the "audit" Linux app (ELF binary) will not execute on my Ubuntu 9.10 Server system. ldd says that it is "not a dynamic executable", so it's not a library issue. I decided to try using "audit.pl" and that resolved the issue. However, I'm now stuck with the same problem as some others - the scheduled domain audit returns "Audit Stopped Abnormally" for most of the PC's and "Cannot Connect to Host" for the rest. I'm going to add the firewall_allow.vbs to the domain logon script and, hopefully, that'll resolve the "Cannot Connect to Host" problems.
But, I'm still stuck on the "Audit Stopped Abnormally" problem. I can audit them manually from each workstation, but the scheduled audits aren't working. Any new developments on this?
|