Bug ID 591305: Audit log messages with "user unknown" appear on install

Last Modified: Feb 21, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4

Opened: May 04, 2016
Severity: 3-Major

Symptoms

Multiple log entries in /var/log/audit similar to May 4 11:37:35 localhost notice mcpd[5488]: 01070417:5: AUDIT - client Unknown, user Unknown - transaction #33-1 - object 0 - create_if { db_variable { db_variable_name "version.edition" db_variable_value "<none>" db_variable_sync_type "private_internal" db_variable_data_type "string" db_variable_display_name "Version.Edition" } } [Status=Command OK]

Impact

This is the result of a daemon on the system not properly identifying itself to mcpd. The log messages can be safely ignored.

Conditions

This happens on initial install, it is not yet known what triggers it.

Workaround

None

Fix Information

None

Behavior Change