dash.prompt.message.file

This parameter specifies a file that contains auditing messages that display to the user in various situations. The default location of the file is /etc/centrifda/dash.prompt.message. In that file are some key-value pairs that you can customize to your preferred wording or language.

The following situations apply if the user is set as "Audit required" but also doesn't have the "Always permit logon" right:

• dad.stopped.purposely - If an administrator intentionally stops the auditing

  service (also referred to as the DirectAudit daemon, or dad), the following

  message displays:

  Copy

  The terminal session requires auditing and cannot continue because the administrator has stopped the auditing service on this computer. You can type 'q' to log out or 'r' to try to resume this session after restarting the auditing service. If resuming the session fails, contact the administrator to restart the auditing service, then log back on.

• dad.stopped.unexpectedly - If the auditing service stops unexpectedly, the

  following message displays:

  Copy

  The terminal session requires auditing and cannot continue because the auditing service was stopped unexpectedly and could not be automatically started. You can type 'q' to log out or 'r' to try resume this session. If resuming the session fails, contact the administrator to check whether the auditing service can be started. Please contact Delinea Technical Support if the service cannot be restarted.

• dad.diskspace.too.low- If there isn't enough disk space on the audited

  system, the following message displays:

  Copy

  The terminal session requires auditing and cannot continue because auditing has run out of disk space for spooling audit data. After you increase the available disk space, type 'q' to log out or 'r' to try to resume this session. If resuming the session fails, contact your administrator to increase the available disk space and then try again.