I.1 Program Files and Directories

The following table lists the program files and directories, their associated components, and their functions.

See Section I.2, Program Directories for a breakout of program filenames by operating system.

File

Program Component

Function

audcgen

 

AudCGen is a command line utility that generates SSL certificates for the Secure Logging Server and logging applications. Novell Audit uses certificates to authenticate logging applications and sign events. For more information, see Section H.5, AudCGen.

auditagt.ncf

 

Auditagt.ncf contains the startup script for the Novell eDirectory™ and NetWare® Instrumentations. It is added to the logging server’s autoexec.ncf file during installation.

auditDS

eDirectory Instrumentation

The auditDS module hooks into the eDirectory event system. It logs all events configured under Novell Audit > eDirectory in the NCP Server object.

For more information, see Section B.1, eDirectory Events.

IMPORTANT:On Windows, auditDS must be located in the same directory as the directory database set (DIB). By default, the DIB is located in \novell\nds\ . On UNIX, auditDS must be in /usr/lib/nds-modules .

auditext

 

A utility used to add or remove the Novell Audit objects and attributes from the eDirectory schema. AuditExt is used by the installation program to extend the eDirectory schema during installation.

For more information, see Section H.6, AuditExt.

auditNW

NetWare Instrumentation (for NetWare only)

The auditNW module hooks into the NSS, Traditional File System, and NetWare event systems. It logs all events configured under Novell Audit > Filesystem or Novell Audit > NetWare in the NCP Server object.

For more information, see Section B.3, NetWare Events and Section B.2, File System Events.

auditsvr.ncf

 

Auditsvr.ncf contains the startup script for the Secure Logging Server. It is added to the logging server’s autoexec.ncf file during installation.

dsicert.pem

eDirectory Instrumentation

Certificate required by eDirectory Instrumentation on Linux, NetWare, Solaris, and Windows platforms.

dsipkey.pem

eDirectory Instrumentation

Private key required by on Linux, NetWare, Solaris, and Windows platforms.

Disconnected Mode Cache Directory

Logging Cache Module for the Platform Agent

The directory where the Logging Cache Module temporarily logs incoming information if the connection to the Secure Logging Server is interrupted.

Java Classpath

Java channel driver JMS channel driver JDBC channel driver

The location of the java source code, as well as any other classes or objects that are required by the Novell Audit Java, JMS, and JDBC channel drivers.

jdbclogdriver.jar

JDBC channel driver

jdbclogdriver.jar is a Java archive file that contains the JDBC channel driver.

For more information, see Section 6.7, JDBC.

lcache

Logging Cache Module for the Platform Agent

The Logging Cache Module enables the Platform Agent to temporarily log incoming information to its Disconnected Mode Cache if the connection to the Secure Logging Server is interrupted.

For more information on configuring the disconnected mode cache, see Section 4.1, Configuring the Platform Agent.

lengine

Secure Logging Server

The Secure Logging Server is the server component in the Novell auditing system. It manages the flow of information to and from the Novell auditing system. It receives incoming events and requests from the Platform Agents; logs information to the data store; monitors designated events; and provides filtering and notification services.

For more information, see Section 4.2, Configuring the Secure Logging Server.

letrans

LETrans

A utility designed to convert raw data files logged by the file channel, into a readable, delimited format.

lgdcvr

Critical Value Reset (CVR) channel driver

The CVR channel allows you to flag an attribute in eDirectory with a reset policy. If the value of that specific attribute is changed, the CVR channel driver resets the value as per the policy defined in the CVR Channel object.

For more information, see Section 6.4, CVR.

lgdfile

File channel driver

The File channel driver writes events to a flat file in the file system. The driver can be configured to provide a single, comma-separated file (*.csv) or a human-readable log file.

For more information, see Section 6.5, File.

lgdjava

Java channel driver

The Java channel driver allows the logging server to output filtered events to a Java application.

For more information, see Section 6.6, Java.

lgdmonitor

Monitor channel driver

The Monitor channel driver provides logging system statistics in iManager.

For more information, see Section 6.10, Monitor.

lgdmssql

Microsoft SQL Server channel driver

The MSSQL channel driver writes events to a Microsoft SQL Server database.

For more information, see Section 6.9, Microsoft SQL Server.

lgdmsql

MySQL channel driver

The MySQL channel driver writes events to a MySQL database.

For more information, see Section 6.11, MySQL.

lgdora

Oracle channel driver

The Oracle channel enables the logging server to log events to an Oracle database.

For more information, see Section 6.12, Oracle.

lgdsmtp

SMTP channel driver

The SMTP channel driver e-mails events to a designated relay host.

For more information, see Section 6.13, SMTP.

lgdsnmp

SMNP channel driver

The SNMP channel driver sends events to an SNMP management system.

For more information, see Section 6.14, SNMP.

lgdsyslg

Syslog channel driver

The Syslog channel driver allows the logging server to log events to a specific syslog facility on any syslog host or to a remote syslog daemon.

For more information, see Section 6.15, Syslog.

log

File channel log file

The filename for the File Channel data store.

logevent

Platform Agent

The Platform Agent is the client component in the Novell auditing system. It receives logging information and system requests from individual applications and transmits the information to the Secure Logging Server.

For more information, see Section 4.1, Configuring the Platform Agent.

logevent.cfg logevent.conf

Platform Agent configuration file

A text-based configuration file that stores the local Platform Agent’s configuration settings. Every computer running the Platform Agent has its own logevent.cfg file.

For more information on the configuration settings and file location, see Section 4.1, Configuring the Platform Agent.

logparse

Log Parser

The Log Parser Instrumentation harvests events from any text-based log file, such as syslog, Apache error logs, and Novell Application Launcher™ logs. Events are parsed and formatted in Novell Audit event structure so the events can be processed by Novell Audit. For more information, see Section 5.4.5, Log Parser Instrumentation.

lreport

Novell Audit Report program file

Novell Audit Report is a Windows-based, ODBC-compliant application that can query Oracle and MySQL data stores (or any other database that has ODBC driver support).

LSC files

 

Log Schema (LSC) files catalog the events that can be logged for a given application. They also provide event descriptions and field titles, although this is optional.

mdb

Interface to Novell eDirectory, the Windows registry, the file system, or other systems

MDB is a simple API that provides all the functionality required to access and manipulate a variety of hierarchical databases (for example, eDirectory, the Windows registry, the file system, or other systems).

The MDB API allows Novell Audit to become independent of the actual database.

The underlying concepts of MDB are similar to ODBC, though the functionality differs.

mdbds

 

MDBDS is the MDB driver for eDirectory.

mdbreg

 

MDBREG is the MDB driver for the Windows Registry.

naudit

 

Naudit contains the startup script for the Secure Logging Server on Windows, Linux, and Solaris systems.

NauditLogDriver.jar

JMS channel driver

NauditLogDriver.jar is a Java archive file that contains the JMS channel driver.

For more information, see Section 6.8, JMS.

NauditLogDriverUtil.jar

 

NauditLogDriver.jar is a Java archive file that contains the JMS channel driver.

For more information, see Section 6.8, JMS.

nauditpaconfig.jar

 

The Platform Agent Configuration Tool provides a graphical interface to manage Novell Audit Platform Agents. This tool operates by making changes to the logevent.cfg file, which contains configuration settings for the Platform Agent.

For more information, see Section H.8, NauditPAConfig.

NauditWin.exe

Windows Instrumentation

The NauditWin module collects events from the Windows Event Viewer and sends them to the Secure Logging Server for processing by Novell Audit. It logs all events selected in the Events page in the Windows Instrumentation object.

For more information, see Section 5.4.4, Windows Instrumentation.

nproduct.log

 

Nproduct.log contains any errors that have been logged during startup on Windows, Linux, and Solaris systems.

nwicert.pem

NetWare Instrumentation

Certificate required by NetWare Instrumentation.

nwipkey.pem

NetWare Instrumentation

Private key required by NetWare Instrumentation.

winicert.pem

Windows Instrumentation

Certificate required by Windows Instrumentation.

winipkey.pem

Windows Instrumentation

Private key required by Windows Instrumentation.