Cafagent not running. Failed to start Symantec Agent for Linux CAF daemon.

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

Symantec Endpoint Protection (SEP) for Linux cafagent service is not running. Failed to start Symantec Agent for Linux CAF daemon.

Daemon status:

  cafagent             not running
  sisamdagent       running
  sisidsagent         running
  sisipsagent         running

Module status:

  sisevt               loaded
  sisap                loaded

 

// /var/log/massages

Jan 24 09:57:11 ip-100-64-18-146 systemd: Starting Symantec Agent for Linux CAF daemon...
Jan 24 09:57:11 ip-100-64-18-146 systemd: Started Symantec Agent for Linux IDS daemon.
Jan 24 09:57:11 ip-100-64-18-146 systemd: Cannot add dependency job for unit ypbind.service, ignoring: Unit not found.
Jan 24 09:57:11 ip-100-64-18-146 systemd: Cannot add dependency job for unit sssd.service, ignoring: Unit not found. Jan 24 09:57:11 ip-100-64-18-146 systemd: Starting Symantec Agent for Linux IPS daemon...
Jan 24 09:57:12 ip-100-64-18-146 systemd: Started Symantec Agent for Linux CAF daemon.

// journalctl-cafagent.txt

Jan 24 09:57:11 ip-100-64-18-146.ilgicltd.com systemd[1]: cafdaemon.service: main process exited, code=exited, status=70/n/a
Jan 24 09:57:11 ip-100-64-18-146.ilgicltd.com systemd[1]: Failed to start Symantec Agent for Linux CAF daemon.
Jan 24 09:57:11 ip-100-64-18-146.ilgicltd.com systemd[1]: Unit cafdaemon.service entered failed state.
Jan 24 09:57:11 ip-100-64-18-146.ilgicltd.com systemd[1]: cafdaemon.service failed.
Jan 24 09:57:11 ip-100-64-18-146.ilgicltd.com systemd[1]: cafdaemon.service holdoff time over, scheduling restart.
Jan 24 09:57:11 ip-100-64-18-146.ilgicltd.com systemd[1]: Stopped Symantec Agent for Linux CAF daemon.
Jan 24 09:57:11 ip-100-64-18-146.ilgicltd.com systemd[1]: Starting Symantec Agent for Linux CAF daemon...
Jan 24 09:57:12 ip-100-64-18-146.ilgicltd.com systemd[1]: Started Symantec Agent for Linux CAF daemon. 

 

Environment

SEP:  14.3.2533.6000

Cause

Dmidecode was missing.

Resolution

1. Uninstall the SEP agent.

2. Install the dmidecode

e.g. sudo yum install dmidecode

3. Install the SEP agent.

Note: rpm -qa | grep dmidecode: Is used to check whether dmidecode is installed or not.