H.6 AuditExt

The AuditExt utility adds Novell Audit objects (Logging Services and its associated containers, the Logging Server object, Channel objects, Notification objects, and Application objects) to the eDirectory schema.

Logging applications use AuditExt to create their associated Application objects and to populate the Application objects’ log schema attribute.

NOTE:Novell Audit stores LSC files as attributes in their respective Application object. English LSC files are stored under the NAuditAppSchemaEn attribute, French LSC files are stored under the NAuditAppSchemaFr attribute, and so forth.

AuditExt is also required to uninstall Novell Audit. For information on this procedure, see Section 10.4, Uninstalling Novell Audit.

The AuditExt utility is located in the following directories:

Table H-4 AuditExt Directories

Platform

Directory

NetWare

sys:\system\auditext.nlm

Windows

\program files\novell\nsure audit\auditext.exe

Linux

/opt/novell/naudit/auditext

Solaris

/opt/NOVLnaudit/auditext /opt/NOVLnaudit/auditext.sh

H.6.1 Using AuditExt to Extend the Schema

The installation program uses AuditExt to extend the eDirectory schema during the initial installation. Under normal circumstances, the schema should only be extended one time. This is automatically done during the Novell Audit installation on the first server in the tree.

If, for some reason, the initial schema extension fails, you can run AuditExt to extend the schema again. However, you should not try to extend the schema again until the first schema extension is fully replicated.

NOTE:A common indicator that the Novell Audit schema extension has failed is if you create Novell Audit objects, but the objects aren’t added to the tree. The tree doesn’t recognize the attribute even though you are able to create the objects in iManager.

Another instance when you might need to run the AuditExt utility is to re-create the Logging Services container. If Logging Services is deleted from the tree, it can only be re-created by running AuditExt.

To use AuditExt to extend the eDirectory schema or re-create the Logging Services container:

  1. Launch AuditExt at the server console.

    • On NetWare, enter sys:\system\auditext.nlm .
    • On Windows, enter \program files\novell\nsure audit\auditext.exe.
    • On Linux, enter /opt/novell/naudit/auditext .
    • On Solaris, enter /opt/NOVLnaudit/auditext .
  2. Specify your admin username and password.

  3. Select Add Schema Extensions, then press Enter.

    AuditExt adds the Novell Audit objects to the eDirectory schema.

H.6.2 Using AuditExt to Add LSC Files to Application Objects

During their installations, logging applications use the AuditExt utility to automatically create their associated Application objects and to populate the Application objects’ log schema attribute. However, if you modify or localize a Log Schema (LSC) file, you can manually add it to the Application object by running the AuditExt utility at the server console.

To add a log schema to an Application object at the server console, enter the following command:

auditext -lsc -u:username -p:password "-a:Application_object" -f:LSC_file -l:language

NOTE:If the path to the LSC file contains spaces, enclose the path and the -f flag in quotation marks. For example, "-f:c:/my files/myapp.lsc".

The following is a sample command that adds the English edir.lsc file to the eDirectory Instrumentation Application object:

auditext -lsc -u:admin -p:argl "-a:eDirectory Instrumentation" -f:\temp\edir.lsc -l:en

AuditExt requires that the first line of all LSC files is formatted as follows:

#^object_name^Application_ID^Application_Identifier^language_identifier

Each parameter is explained in the following table.

Table H-5 AuditExt Parameters

Parameter

Description

object_name

The string that is used as the name of the Application object.

Application_ID

The four-digit hex value assigned to the current application.

All Application IDs are assigned through Novell Developer Support and are maintained in the Novell Audit central registry.

Application_Identifier

The name the logging application uses to identify itself to the logging server.

The Application Identifier is stored in the application’s certificate.

language_identifier

A two-character code for the current LSC file’s language.

  • EN = English
  • ES = Spanish
  • FR = French
  • DE = German
  • IT = Italian
  • PT = Portuguese
  • RU = Russian

If no path is given, AuditExt looks for the log schema files in the working directory of AuditExt. By default, schema log files are contained following directories:

Table H-6 Schema Log File Directories

Operating System

Directory

NetWare

sys:\system\naudit\*.lsc

Windows

\program files\novell\nsure audit\logschema\*.lsc

Linux

/opt/novell/naudit/logschema/*.lsc

Solaris

/opt/NOVLnaudit/logschema/*.lsc