H.1 Program Files and Directories

The following table lists the program files and directories, their associated components, and their functions.

See Section H.2, Program Directories for a breakout of program filenames by operating system.

File

Program Component

Function

audcgen

 

AudCGen is a command line utility that generates SSL certificates for the Secure Logging Server and logging applications. Nsure Audit uses certificates to authenticate logging applications and sign events. For more information, see Section G.6, AudCGen.

auditagt.ncf

 

Auditagt.ncf contains the startup script for the Novell eDirectory™ and NetWare® Instrumentations. It is added to the logging server’s autoexec.ncf file during installation.

auditDS

eDirectory Instrumentation

The auditDS module hooks into the eDirectory event system. It logs all events configured under Nsure Audit > eDirectory in the NCP Server object.

For more information, see Section B.1, eDirectory Events.

IMPORTANT:On Windows, auditDS must be located in the same directory as the directory database set (DIB). By default, the DIB is located in \novell\nds\ . On UNIX, auditDS must be in /usr/lib/nds-modules .

auditext

 

A utility used to add or remove the Nsure Audit objects and attributes from the eDirectory schema. AuditExt is used by the installation program to extend the eDirectory schema during installation.

For more information, see Section G.5, AuditExt.

auditNW

NetWare Instrumentation (for NetWare only)

The auditNW module hooks into the NSS, Traditional File System, and NetWare event systems. It logs all events configured under Nsure Audit > Filesystem or Nsure Audit > NetWare in the NCP Server object.

For more information, see Section B.3, NetWare Events and Section B.2, File System Events.

auditsvr.ncf

 

Auditsvr.ncf contains the startup script for the Secure Logging Server. It is added to the logging server’s autoexec.ncf file during installation.

Disconnected Mode Cache Directory

Logging Cache Module for the Platform Agent

The directory where the Logging Cache Module temporarily logs incoming information if the connection to the Secure Logging Server is interrupted.

Java Classpath

Java channel driver JDBC channel driver

The location of the java source code, as well as any other classes or objects that are required by the Nsure Audit Java and JDBC channel drivers.

jdbclogdriver.jar

JDBC channel driver

jdbclogdriver.jar is a Java archive file that contains the JDBC channel driver.

For more information, see Section 7.7, JDBC.

lcache

Logging Cache Module for the Platform Agent

The Logging Cache Module enables the Platform Agent to temporarily log incoming information to its Disconnected Mode Cache if the connection to the Secure Logging Server is interrupted.

For more information on configuring the disconnected mode cache, see Section 4.1, Configuring the Platform Agent.

lengine

Secure Logging Server

The Secure Logging Server is the server component in the Nsure Auditing system. It manages the flow of information to and from the Nsure Auditing system. It receives incoming events and requests from the Platform Agents; logs information to the data store; monitors designated events; and provides filtering and notification services.

For more information, see Section 4.2, Configuring the Secure Logging Server.

letrans

LETrans

A utility designed to convert raw data files logged by the file channel, into a readable, delimited format.

lgdcvr

Critical Value Reset (CVR) channel driver

The CVR channel allows you to flag an attribute in eDirectory with a reset policy. If the value of that specific attribute is changed, the CVR channel driver resets the value as per the policy defined in the CVR Channel object.

For more information, see Section 7.4, CVR.

lgdfile

File channel driver

The File channel driver writes events to a flat file in the file system. The driver can be configured to provide a single, comma-separated file (*.csv) or a human-readable log file.

For more information, see Section 7.5, File.

lgdjava

Java channel driver

The Java channel driver allows the logging server to output filtered events to a Java application.

For more information, see Section 7.6, Java.

lgdmssql

Microsoft SQL Server channel driver

The MSSQL channel driver writes events to a Microsoft SQL Server database.

For more information, see Section 7.8, Microsoft SQL Server.

lgdmsql

MySQL channel driver

The MySQL channel driver writes events to a MySQL database.

For more information, see Section 7.9, MySQL.

lgdora

Oracle channel driver

The Oracle channel enables the logging server to log events to an Oracle database.

For more information, see Section 7.10, Oracle.

lgdsmtp

SMTP channel driver

The SMTP channel driver e-mails events to a designated relay host.

For more information, see Section 7.11, SMTP.

lgdsnmp

SMNP channel driver

The SNMP channel driver sends events to an SNMP management system.

For more information, see Section 7.12, SNMP.

lgdsyslg

Syslog channel driver

The Syslog channel driver allows the logging server to log events to a specific syslog facility on any syslog host or to a remote syslog daemon.

For more information, see Section 7.13, Syslog.

log

File channel log file

The filename for the File Channel data store.

logevent

Platform Agent

The Platform Agent is the client component in the Nsure auditing system. It receives logging information and system requests from individual applications and transmits the information to the Secure Logging Server.

For more information, see Section 4.1, Configuring the Platform Agent.

logevent.cfg logevent.conf

Platform Agent configuration file

A text-based configuration file that stores the local Platform Agent’s configuration settings. Every computer running the Platform Agent has its own logevent.cfg file.

For more information on the configuration settings and file location, see Section 4.1, Configuring the Platform Agent.

lreport

Nsure Audit Report program file

Nsure Audit Report is a Windows-based, ODBC-compliant application that can query Oracle and MySQL data stores (or any other database that has ODBC driver support).

LSC files

 

Log Schema (LSC) files catalog the events that can be logged for a given application. They also provide event descriptions and field titles, although this is optional.

mdb

Interface to Novell eDirectory, the Windows registry, the file system, or other systems

MDB is a simple API that provides all the functionality required to access and manipulate a variety of hierarchical databases (for example, eDirectory, the Windows registry, the file system, or other systems).

The MDB API allows Nsure Audit to become independent of the actual database.

The underlying concepts of MDB are similar to ODBC, though the functionality differs.

mdbds

 

MDBDS is the MDB driver for eDirectory.

mdbreg

 

MDBREG is the MDB driver for the Windows Registry.

naudit

 

Naudit contains the startup script for the Secure Logging Server on Windows, Linux, and Solaris systems.

nauditpaconfig.jar

 

The Platform Agent Configuration Tool provides a graphical interface to manage Nsure Audit Platform Agents. This tool operates by making changes to the logevent.cfg file, which contains configuration settings for the Platform Agent.

For more information, see Section G.8, NauditPAConfig.

nproduct.log

 

Nproduct.log contains any errors that have been logged during startup on Windows, Linux, and Solaris systems.