Diagnostic Messages 2001 - 2434
Number | Diagnostic Text | Meaning | Action |
---|---|---|---|
2001 | No variables defined | The Defined Variables Editor found no user-defined variables upon saving the contents of the Defined Variables page. | Make sure the user-defined variables are defined before saving. |
2002 | System variable <variable name> should not be defined | The Defined Variables Editor does not allow the defining of an Endpoint Privilege Management specific variable as a user-defined variable. | Remove the defined variable from the defined variables list. |
2003 | List variable <variable name> contains a number in position # | List variables cannot contain numbers. | Remove the number from the list or convert it to a string literal. |
2004 | No Conditional Expression Generated! | The Endpoint Privilege Management W5 Editor failed to generate a conditional expression based on the given constraints, if any. | Check all of the constraints and try again. |
2005 | Failed to process constraints from policy IF statement | The Endpoint Privilege Management W5 Editor failed to process a policy IF statement. | Contact BeyondTrust Support. |
2006.1 | Error saving file: <error message> | TheEndpoint Privilege Management Policy Editor encountered an error while saving the policy file. The OS specific reason for the error follows. | Take the appropriate action indicated by the OS specific error. |
2006.2 | Error saving file: <error message> | TheEndpoint Privilege Management Policy Editor encountered an error while saving the policy file. The OS specific reason for the error follows. | Take the appropriate action indicated by the OS specific error. |
2006.3 | Error saving file: <error message> | TheEndpoint Privilege Management Policy Editor encountered an error while saving the policy file. The OS specific reason for the error follows. | Take the appropriate action indicated by the OS specific error. |
2007.1 | Error saving backup file: <error message> | TheEndpoint Privilege Management Policy Editor failed to make a backup of the policy file. The OS specific reason for the error follows. | Take the appropriate action indicated by the OS specific error. |
2007.2 | Error saving backup file: <error message> | TheEndpoint Privilege Management Policy Editor failed to make a backup of the policy file. The OS specific reason for the error follows. | Take the appropriate action indicated by the OS specific error. |
2008 | Timeout Reached | The Endpoint Privilege Management Policy Editor has timed-out. The Policy Editor has been idle for too long. | Close the Policy Editor when not in use. |
2009 | Authentication Required to access requested page. | User credentials are insufficient to access the requested page. | Enter a valid username and password that has sufficient access to the requested page. Note that you may have to close the browser and open it again to clear the password cache. |
2010 | Security Problem - please contact your systems administrator. | The Endpoint Privilege Management GUI encountered an error while trying to authenticate. | Contact BeyondTrust Support. |
2011 | Only Basic Authentication Supported | The Endpoint Privilege Management GUI only understands basic authentication from a web browser. | Check if the browser supports basic authentication. |
2012 | Username and Password must be supplied. | A username and password were not entered in the User Authentication Dialog box provided by the web browser. | Enter a value username and password. |
2013 | Failed to Authenticate username and password. | The Endpoint Privilege Management GUI was unable to authenticate the supplied username and password. | Contact BeyondTrust Support. |
2014.01 | Check the Policy Server and run host name service configuration (/etc/hosts, DNS, NIS, etc). This could also be an attempt to spoof a Policy Server from an unauthorized machine. | Policy server name <name> not valid for address <ip address> | The name claimed by the policy server does not match the address of the connection on the run host. |
2014.02 | Check the submit and Policy Server name service configuration (/etc/hosts, DNS, NIS, etc). This could also be an attempt to spoof a submit host from an unauthorized machine. | Submit host name <name> not valid for address <ip address> | The name claimed by the submit host does not match the address of the connection on the policy server. |
2016 | Certificate doesn't verify | SSL certificate did not verify the host - single sign on. | Check certificate is valid and matches host |
2017 | Common name doesn't match host name | SSL cert common name did not match the host name. | |
2018 | Can't read certificate file | Verify the file exists, or check the permissions. | |
2019 | Unable to get CA file | Verify the file is accessible. | |
2020 | Can't read CA list | The file cannot be read | |
2023 | SSL error: premature close | The console closed the connection ahead of time | Check the console. |
2024 | SSL read problem | A response could not be read from the SSL channel. | |
2025 | Shutdown failed | Failed to shutdown the SSL channel. | |
2026 | Unable to get CERT file | Unable to access the CERT file. | Check the settings file entry. |
2027 | SSL connect error | SSL connect error | Check the return codes. |
2050 | Could not allocate enough memory to process BeyondInsight response. | A realloc operation failed. | If this occurs often, increase the amount of swap space on the machine. |
2051 | BeyondInsight returned an error <detailed error message> | The BeyondInsight event service rejected the data that Endpoint Privilege Management for Unix and Linux sent. | Refer to the accompanying BeyondInsight error message for additional information. |
2052 | libcurl error: Could not enable verification of the peer certificate's authenticity <detailed error message> | An error occurred while invoking a libcurl command. | Refer to the accompanying error message for additional information. |
2053 | BeyondInsight CA certificate is missing or not valid. | sslrcscafile does not exist in the settings file or has an empty or invalid value. | Add a valid BeyondInsight CA certificate and assign to the sslrcscafile keyword in the settings file. |
2054 | libcurl error: Problem with the BeyondInsight Certificate Authority (CA) certificate <detailed error message> | An error occurred while invoking a libcurl command to assign the CA certificate. | Refer to the accompanying error message for additional information. |
2055 | libcurl error: Could not enable verification of the server named in the peer certificate <detailed error message> | An error occurred while invoking a libcurl command. | Refer to the accompanying error message for additional information. |
2056 | No valid BeyondInsight client certificate in the settings file. | sslrcscertfile does not exist in the settings file or is empty. | Add a validBeyondInsight client certificate and assign to the sslrcscertfile keyword in the settings file. |
2057 | libcurl error: Problem with the BeyondInsight client certificate <detailed error message> | An error occurred while invoking a libcurl command to assign the BeyondInsight client certificate. | Refer to the accompanying error message for additional information. |
2058 | Event forwarding failed <detailed error message> | An error occurred while the event data was being sent to BeyondInsight. | Refer to the accompanying BeyondInsight error message for additional information. |
2059 | Unable to form appropriate headers for HTTP request. | An error occurred while trying to build the HTTP request. | Ensure there is enough memory on the machine for the operation. |
2060 | Unable to set up libcurl environment to communicate with the target web service. | An error occurred while trying to initialize libcurl. | Ensure there is enough memory on the machine for the operation. |
2061 | Encryption algorithm <encryption algorithm> is not valid. Please refer to the Endpoint Privilege Management for Unix and Linux Admin for valid values. | An invalid encryption algorithm was specified in for eventlogencryption in the settings file. | Please refer to the Endpoint Privilege Management for Unix and Linux Admin Guide for valid encryption algorithm types. |
2062 | Problem with store file <file> <detailed error message> | The store file specified is missing or invalid. | Refer to the accompanying error message for additional information. |
2063 | Problem with key file <file> <detailed error message> | The key file specified is missing or invalid. | Refer to the accompanying error message for additional information. |
2064 | An encryption key file must be provided for the encryption algorithm <encryption type> | When invoking pbfwdevents to forward event log data to BeyondInsight, an encryption algorithm was named but not the corresponding key file. | When invoking pbfwdevents and providing an encryption algorithm, you must also provide the key file. |
2065 | The encryption algorithm must be provided for the specified encryption key file <file> | When invoking pbfwdevents to forward eventlog data to BeyondInsight, a key file was named but not the corresponding encryption algorithm. | When invoking pbfwdevents and providing a key file, you must also provide the encryption algorithm. |
2066 | Unable to lock store file <file> | The attempt to lock the store file failed. | Check for reasons why the store file cannot be locked. |
2067 | Failed to lock store index file <file> | The attempt to lock the store index file failed. | Check for reasons why the store index file cannot be locked. |
2068 | Unable to forward record to destination due to rejected data. Skipping this record permanently. | Data being sent to BeyondInsight has a problem or is corrupted. | Check for reasons why the data is rejected. |
2069 | Unable to forward record to destination. Terminating store and forward processing. | A problem was encountered while communicating with BeyondInsight. | Check if theBeyondInsight server is available and resolve any network connectivity issues that may be present. |
2070 | Unknown error. Terminating store and forward processing. | An unknown error occurred while communicating with BeyondInsight. | Check if theBeyondInsight server is up and resolve any network connectivity issues. |
2071 | There is no store file to read. | The settings file does not contain the keyword that identifies the appropriate store file. | Add the correct store file keyword and value in the settings file. |
2072 | 2072 specified program is null. | A pb.settings host specification contains backticks without specifying a program. | Correct the host specifications in pb.settings. |
2073 | 2073 specified program:<programname> is not secure. | The program specified in the pb.settings host file (or the path leading to that program) is not secure (eg writable by non-root). | Change the permissions of the specified path and program. |
2074 | popen error: <errno> <error string> | popen failed to execute the program specified by backticks in a pb.settings host specification. | Examine the <error string> for potential cause of the failure. |
2075 | pclose error:<errno> <error string> | pclose failed when waiting on the program. | Examine the <error string> for potential cause of the failure. |
2076 | null hostname returned by <program> | An external program (specified for submitmasters, acceptmasters, logservers, altsubmitmasters keyword, or the pblocald --acceptmasters option) did not return data. | Ensure that the program (identified in the diagnostic text) returns a valid host specification. |
2077 | select failed in <program name> while checking fd <number> during timed atomic write (<error string>) | Select failed during a timed atomic write due to reason specified in the <error string>. | Examine the <error string> for potential cause of the failure. |
2078 | atomic loop timed out in <program name> on fd <number> during timed atomic write | Program exceeded its protocol timeout setting while looping during an atomic write. | Adjust the program's protocol timeout setting. |
2079 | select timed out in <program name> while checking fd <number> during atomic read | Select timed out while waiting for fd to become readable. | |
2080 | select failed in <program name> while checking fd set (<error string>) during atomic read | Select failed during a timed atomic read due to reason specified in the <error string>. | Examine the <error string> for potential cause of the failure. |
2081 | atomic loop timed out in <program name> on fd <number> during timed atomic read | Program exceeded its protocol timeout setting while looping during an atomic read. | Adjust the program's protocol timeout setting. |
2082 | Timed atomic write by <program name> to fd <number> failed (<error string>) | A timed atomic write failed. This is followed by a system- specific diagnostic message. | Examine the <error string> for potential cause of the failure. |
2083 | Timed atomic read by <program name> from fd <number> failed (<error string>) | A timed atomic read failed. This is followed by a system- specific diagnostic message. | Examine the <error string> for potential cause of the failure. |
2084 | <keyword> setting contains invalid character(s) | The keyword has a value that contains invalid characters. | Refer to the user documentation for the correct usage and edit pb.settings. |
2085 | Could not access debug level settings file. | Unable to save the debug level setting. | |
2086 | Insufficient file system space for debug trace file <filename>. Disabling debug mode. | The disk where the debug trace file will be written is running out of space. Debug tracing is disabled until the issue is resolved. | Make space on the affected file systems in order to produce debug trace files. |
2087 | Debug option <option> must be run as root. | The specified option is only available if the client was run by root. | Rerun as root to use the specified option. |
2088 | Saved debug level exceeds maximum range. Setting debug level to <number> | The debug level settings file contains an invalid value, or the file is corrupt. | Refer to user documentation to determine the location of the appropriate debug level settings file, then correct the value it contains. |
2089 | Select timed out in <program name> while checking fd <number> during timed atomic write | Select timed out waiting for fd to become writeable. | |
2427 | Connection failed after initial establishment | A connection to pbmasterd was initially successful but failed during later setup. | Examine the pbrun and pbmasterd log files to see why the connection aborted. |
2428 | Could not retrieve user information | The user was not found in the server's user database | Use a different user ID or add the user to the server's user database (e.g. /etc/passwd, NIS). |
2429 | Internal error, bad expression type - <policy expression> | An internal error occurred while evaluating an expression | Contact BeyondTrust Support. |
2430 | Can not determine dynamic include file name | The include file name could not be evaluated for an entitlement report. | Simplify the expression, or rerun the report with constraints that simplify the expression. |
2431 | Terminating to protect system resources | Entitlement reporting creates many child processes to evaluate the true and false branches of each decision. Entitlement reporting for Endpoint Privilege Management policies with large numbers of IF statements that do not result in an accept or reject can spawn a huge number of child processes. | If the host machine’s resources are expended to the point that the machine becomes unresponsive, try a machine with more memory and at least two processors. Edit the policy so that most IF statements result in an accept or a reject. A limit has been placed on that machine so that entitlement reporting will not disable a machine. |
2432 | Entitlement reporting loop terminating to protect system resources at line <number>,:<string> | Entitlement reporting creates many child processes to evaluate the true and false branches of each decision. Certain loop constructs can result in an endless loop during entitlement reporting. A safety mechanism to limit the number of child processes evaluating the same loop is used to prevent disabling the system with too many child processes. In this case, only the processes acting on the same loop statement are terminated. The rest of the entitlement reporting processes continue to create an entitlement report. This can result in an incomplete report. | If the host system has plenty of resources, increasing the value of the --maxloopchildren option may result in additional reported data. The line number and string reported indicate the policy position where the possibly endless loop is located. Evaluate the policy code to determine if the loop can be rewritten in a more efficient manner. |
2433 | sigprocmask failure | A call to the sigprocmask() function failed. | Contact BeyondTrust Support. |
2434 | waitpid error: <number> <string> | A call to the waitpid() function failed. The errno value and its meaning are displayed. | Evaluate the errno value and its meaning to determine the possible actions. Contact BeyondTrust Support. |
Updated about 1 month ago