Server Alarms - Avaya Support

Login Alarms
Login Alarms
The system monitors access to the server and alarms suspicious activity. Table 21: Login
Alarms describes the Login alarms and their troubleshooting procedures.
For the S8300 Server, see Table 22: S8300 Login Alarms
Table 21: Login Alarms 1 of 2
Event
ID
Alarm
Level
Alarm Text, Cause/Description, Recommendation
1 WRN Successful CM login.
2 MIN “SAT_auth:Login for [inads] invalid password”
1. A SAT login to Communication Manager failed. Verify the alarm, either
from the:
- Web interface, by selecting View Current Alarms
- Linux command line, by entering almdisplay -v
2. Since mis-typing a login sequence usually causes this alarm, enter
almclear -n #id to clear the alarm.
3. If this alarm is perceived as a security threat (often due to its
persistence or frequent recurrence), notify the customer.
3 WRN Successful Linux login
4 MIN “Login for [linux] – failed – password check”
1. A login to a server’s Linux command line failed. Verify the alarm, either
from the:
- Web interface, by selecting View Current Alarms
- Linux command line, by entering almdisplay -v
2. Since mis-typing a login sequence usually causes this alarm, enter
almclear -n #id to clear the alarm.
3. If this alarm is perceived as a security threat (often due to its
persistence or frequent recurrence), notify the customer.
1 of 2
Communication Manager Release 5.0 Issue 4 January 2008 91