Novell Access Manager 3.1 SP1 Administration Console Guide

Novell Access Manager 3.1 SP1 Administration Console Guide

Administration Console

Security Considerations

Administration Console Conventions

Configuring the Default View

Changing the Administration Console Session Timeout

Changing the Password for the Administration Console

Multiple Administrators, Multiple Sessions

Enabling Auditing

Backing Up and Restoring Components

How The Backup and Restore Process Works

Backing Up the Administration Console

Restoring an Administration Console Configuration

Restoring an Identity Server

Restoring an Access Gateway

Running the Diagnostic Configuration Export

Security and Certificate Management

Understanding How Access Manager Uses Certificates

Managing Certificates

Assigning Certificates to Access Manager Devices

Access Manager Logging

Understanding the Types of Logging

Downloading the Log Files

Using the Log Files for Troubleshooting

Changing the IP Address of Access Manager Devices

Changing the IP Address of the Administration Console

Changing the IP Address of an Identity Server

Changing the IP Address of the Access Gateway Appliance

Changing the IP Address of an Audit Server

Troubleshooting the Administration Console

Stopping Tomcat on Windows

Checking for Potential Configuration Problems

Logging

Restoring a Failed Secondary Console

Moving the Primary Administration Console to New Hardware

Converting a Secondary Console into a Primary Console

Orphaned Objects in the Trust/Configuration Store

Repairing the Configuration Datastore

Session Conflicts

Unable to Log In to the Administration Console

(Linux) Exception Processing IdentityService_ServerPage.JSP

Backup/Restore Failure Because of Special Characters in Passwords

Certificates Terminology

Troubleshooting Certificate Issues

Resolving Certificate Import Issues

Mutual SSL with X.509 Produces Untrusted Chain Messages

Certificate Command Failure

Can’t Log In with Certificate Error Messages

When a User Accesses a Resource, the Browser Displays Certificate Errors

Access Gateway Canceled Certificate Modifications

A Device Reports Certificate Errors

Troubleshooting XML Validation Errors

Modifying a Configuration That References a Removed Object

Configuration UI Writes Incorrect Information to the Local Configuration Store

Access Manager Audit Events and Data

NIDS: Sent a Federate Request (002e0001)

NIDS: Received a Federate Request (002e0002)

NIDS: Sent a Defederate Request (002e0003)

NIDS: Received a Defederate Request (002e0004)

NIDS: Sent a Register Name Request (002e0005)

NIDS: Received a Register Name Request (002e0006)

NIDS: Logged Out an Authentication that Was Provided to a Remote Consumer (002e0007)

NIDS: Logged out a Local Authentication (002e0008)

NIDS: Provided an Authentication to a Remote Consumer (002e0009)

NIDS: User Session Was Authenticated (002e000a)

NIDS: Failed to Provide an Authentication to a Remote Consumer (002e000b)

NIDS: User Session Authentication Failed (002e000c)

NIDS: Received an Attribute Query Request (002e000d)

NIDS: User Account Provisioned (002e000e)

NIDS: Failed to Provision a User Account (002e000f)

NIDS: Web Service Query (002e0010)

NIDS: Web Service Modify (002e0011)

NIDS: Connection to User Store Replica Lost (002e0012)

NIDS: Connection to User Store Replica Reestablished (002e0013)

NIDS: Server Started (002e0014)

NIDS: Server Stopped (002e0015)

NIDS: Server Refreshed (002e0016)

NIDS: Intruder Lockout (002e0017)

NIDS: Severe Component Log Entry (002e0018)

NIDS: Warning Component Log Entry (002e0019)

NIDS: Roles PEP Configured (002e0300)

Access Gateway: PEP Configured (002e0301)

J2EE Agent: Web Service Authorization PEP Configured (002e0305)

J2EE Agent: JACC Authorization PEP Configured (002e0306)

Roles Assignment Policy Evaluation (002e0320)

Access Gateway: Authorization Policy Evaluation (002e0321)

Access Gateway: Form Fill Policy Evaluation (002e0322)

Access Gateway: Identity Injection Policy Evaluation (002e0323)

J2EE Agent: Web Service Authorization Policy Evaluation (002e0324)

J2EE Agent: Web Service SSL Required Policy Evaluation (002e0325)

J2EE Agent: Startup (002e0401)

J2EE Agent: Shutdown (002e0402)

J2EE Agent: Reconfigure (002e0403)

J2EE Agent: Authentication Successful (002e0404)

J2EE Agent: Authentication Failed (002e0405)

J2EE Agent: Web Resource Access Allowed (002e0406)

J2EE Agent: Clear Text Access Allowed (002e0407)

J2EE Agent: Clear Text Access Denied (002e0408)

J2EE Agent: Web Resource Access Denied (002e0409)

J2EE Agent: EJB Access Allowed (002e040a)

J2EE Agent: EJB Access Denied (002e040b)

Access Gateway: Access Denied (0x002e0505)

Access Gateway: URL Not Found (0x002e0508)

Access Gateway: System Started (0x002e0509)

Access Gateway: System Shutdown (0x002e050a)

Access Gateway: Identity Injection Parameters (0x002e050c)

Access Gateway: Identity Injection Failed (0x002e050d)

Access Gateway: Form Fill Authentication (0x002e050e)

Access Gateway: Form Fill Authentication Failed (0x002e050f)

Access Gateway: URL Accessed (0x002e0512)

Access Gateway: IP Access Attempted (0x002e0513)

Access Gateway: Webserver Down (0x002e0515)

Access Gateway: All WebServers for a Service is Down (0x002e0516)

Management Communication Channel: Health Change (0x002e0601)

Management Communication Channel: Device Imported (0x002e0602)

Management Communication Channel: Device Deleted (0x002e0603)

Management Communication Channel: Device Configuration Changed (0x002e0604)

Management Communication Channel: Device Alert (0x002e0605)