[syslog-ng] Error trying to restart service

James McDonald jmcdonald at LCE.com
Mon Jul 2 19:24:26 CEST 2012

I have noticed that the error only appears when I try a 'restart'.
Stop|start|status do not produce the error.  I don't know if that has any
bearing on what the problem may be or not, but I thought I would share it

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Gergely Nagy
Sent: Monday, July 02, 2012 10:54 AM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] Error trying to restart service

James McDonald <jmcdonald at LCE.com> writes:

> We are using version 4.0.1a.  I am using 'service syslog-ng restart.'  
> Below is the output I get from running that command:

Ah, if it is PE, then I'd suggest you contact us via BOSS. This list is for
the OpenSource Edition of syslog-ng.


> [root at server-name ~]# service syslog-ng restart
> WARNING: Configuration file format is too old, please update it to use 
> the
> 4.1 format as some constructs might operate inefficiently;
> WARNING: global: the default value of log_fifo_size() has changed to 
> 10000 in syslog-ng 4.1 to reflect log_iw_size() changes for 
> tcp()/udp() window size changes; Error resolving user; user='root'
> Error resolving group; group='root'

This suggests that syslog-ng can't figure out what uid the root user has.
This usually means that /etc/passwd is borked, or Name Server Switch
functionality (see /etc/nsswitch.conf) is somehow not working.


Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5646 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20120702/6ca5a080/attachment.bin 

More information about the syslog-ng mailing list