search cancel

How to Enable/Disable Trace on dxserver (DSA) ?

book

Article ID: 41407

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

Issue : 

 

Some log files located on C:\Program files\CA\Directory\dxserver\logs are growing up without control and it is filling the disk capacity.

 

Environment:  

Windows 2008

 

Cause: 

DSA trace was enabled to grab error and warn messages . That is using hardrive space.

 

Resolution :

Disable Trace on dxserver DSA.

1. Edit the *dsaname.dxc file under DXHOME/config/knowledge folder to confirm the DSA Console is Enabled and to identify which telnet port is being used.

you should see something like:

console_port = 20393

Note : The port # with telnet command is the <console_port> not the <tcp_port>

However, if you see the lines commented like following :

#   console-port  = 20393

#   console-password  = "{encoding-method}password-hash"

The above Means you need to follow the instructions mentioned on the same file :

To enable the console port, use the 'dxpassword' utility to generate the password-hash and enter it below, un-commenting

both console-port and console-password lines.

#   console-port  = 20393

#   console-password  = "{encoding-method}password-hash"

 

How to Proceed in case you need to enable the DSA Console :

  a) from Command Prompt run :

     C:\Users\Administrator>dxpassword Password01

     {SHA}xGSvgXKHNDMFy9ZJPFk4hWld9TE=

 Where : Password01 , is the password example , you can choose your own to access DSA Console.

{SHA}xGSvgXKHNDMFy9ZJPFk4hWld9TE= , is the output of the hash value for "Password01" after you run the dxpassword command.

 

  b) you need to copy the hash password to *router.dxc file under DXHOME/config/knowledge folder

     and will looks like following :

      console-port  = 20393

     console-password  = "{SHA}xGSvgXKHNDMFy9ZJPFk4hWld9TE="

  

  c)  save the file

   d) stop and start the dxservers services by running from command prompt :

       dxserver stop all 

       dxserver start all

 

2. To access the DSA Console , from cmd execute :

    telnet localhost 20393

    and you will see the prompt :

    DSA Management Console

   Please type your password

   *** please enter the password , on this example : Password01

 

You Will See :  Welcome to the DSA Management Console 

 

at dsa prompt write the following :

dsa> get trace;

 you will See something like this :

 trace = error, warn

dsa>

 

3. If you want to stop it completely, you can do :

set trace=none;

 else you can use :

 set trace=error;

 4. This will be effective in real time without bringing down the DSA.

   Once done you can simply close that window and disconnect with

   'logout;'

 Complete Command Example :

 Welcome to the DSA Management Console

dsa> get trace;

trace = error

dsa> logout;

 

Additional Information:

 

https://support.ca.com/phpdocs/0/5655/support/identitymgr_support.html

http://www.ca.com/us/support/ca-support-online/support-by-product/ca-directory.aspx?id=160

 

Environment

Release: CAIDMB99000-12.6.7-Identity Manager-B to B
Component: