Adjusting logging levels for IM in Virtual Appliance

Products

• CA Identity Suite

Issue/Introduction

Identity Manager that is shipped with Virtual Appliance supports the logging.jsp and logging_v2.jsp files. These files control logging of configuration logs during the run time. The files can be accessed using

http://<IDM_NODE_ADDRESS>:8080/iam/im/logging.jsp and

http://<IDM_NODE_ADDRESS>:8080/iam/im/logging_v2.jsp, respectively.

By default, the logging.jsp and logging_v2.jsp files cannot be accessed by any user. To access this file, you must configure a WIldfly user as a member of the IAMAdmin application group. By default, the application does not have any users.

Environment

Release : 14.x
Component : CA Identity Suite Virtual Appliance

Resolution

You can control access to the logging.jsp and logging_v2.jsp files by adding a user to the IAMAdmin application group.

Follow these steps:

1. Log in to the command-line interface as config user.

2. Run the following command:

             sudo /opt/CA/wildfly-idm/bin/add-user.sh

3. Select option "b" (Application User) for the following question:

             “What type of user do you wish to add?”

4. Respond with any one of the following options when asked to select a "Username":

             Type any previously defined user to add access for an existing user.

             Type a different username to create a user. A user can access the logging.jsp and logging_v2.jsp files only when the user is a member of the IAMAdmin application group.

5. Type IAMAdmin for the following question:

             ”What groups do you want this user to belong to? (Please enter a comma separated list, or leave blank for none): ”

6. Type No for the following question:

             Is this new user going to be used for one AS process to connect to another AS process? e.g. for a slave host controller connecting to the master or for a Remoting connection for server to server EJB calls.

 

You can now access the logging.jsp and logging_v2 files using the following URLs respectively (replace “<IDM_NODE_ADDRESS>” with the IDM server IP address):

 

http://<IDM_NODE_ADDRESS>:8080/iam/im/logging.jsp

http://<IDM_NODE_ADDRESS>:8080/iam/im/logging_v2.jsp