Audit-Specific Events

EventClassParametersDescription
AFS_Audit_WRNone<string>The file "/usr/afs/Audit" has been written to (AIX specific event).
AFS_Aud_OnSECodeAuditing is on for this server process (recorded on startup of a server).
AFS_Aud_OffSECodeAuditing is off for this server process (recorded on startup of a server).
AFS_Aud_UnauthSECode EventEvent triggered by an unauthorized user.

Note

The following audit-specific events indicate an error has occurred while recording the event. Most events have an AFSName associated with them and a host ID. If this information cannot be gathered out of the Rx structure, one of these events is raised.

EventClassParametersDescription
AFS_Aud_NoCallSECode EventNo rx call structure with this event. Cannot get security, AFS ID, or origin of call.
AFS_Aud_NoConnSECode EventNo connection info associated with rx call. Cannot get security, AFS ID, or origin of call.
AFS_Aud_UnknSecSECode EventSecurity of call is unknown (must be authorized or unauthorized caller).
AFS_Aud_NoAFSIdSECode EventNo AFS ID/name associated with a secure event.
AFS_Aud_NoHostSECode EventNo information about origin (machine) of caller.
AFS_Aud_EINVALNoneEventError in audit event parameter (can't record the event parameter).