Described behavior can be tied with timeout or policy issue
STAP verification bases on correlation generated traffic and audit events gathered by agent.
Please check few things:
- does your policy gathers events generated by verification? If you see them in report probably you have problem with timeout. If the events are not visible you must change policy to audit them
- does standard verification works?
- do you see login error generated by standard verification?
Verification process waits a while for audited events and if they are not visible the error is generated in the last stage.
To solve problem the best solution would be expansion of this timeout - unfortunatelly not available in Guardium settings.
If my suggestion is correct - you should receive successful verification from time to time.
------------------------------
Zbigniew (Zibi) Szmigiero
IBM
Warsaw
------------------------------