Steps to Turn on Directory time and query logging
Article ID: 48955
Updated On:
Products
Issue/Introduction
This document shows you step by step how to turn on Directory time and query logging, which is helpful in troubleshooting connections problems
Environment
Component: ETEIAM
Resolution
Steps to Turn on Directory time and query logging Windows
The CA Directory is commonly setup as a router/dxlink to connect to multiple LDAP or AD's as a remote user store. So if you want to capture the specific problem details of that connection you will need to enable logging on the CA Directory router and then restart the Directory router dsa.
Then recreate the problem to capture the details of the problem to see what CA directory is doing at the time of the issue.
One very helpful method to troubleshoot login delays is to use the time and query log level on the CA Directory router/dxlink connection to a remote LDAP/AD. Below we show how to turn this on for troubleshooting login or search delays against the remote LDAP or AD.
This CA Directory logging can be changed in the
../dxserver/config/logging/default.dxc file by changing the line
set trace = error;
Change to
set trace = time,query;
See below EXAMPLE:
# DSA trace log - Used for debugging
set trace-log = "logs/$s_trace.log";
set trace = time,query;
Optionally you could create a log to store each specific log type by adding these lines as well.
set time-log = "logs/$s_time.log";
set query-log = "logs/$s_query.log";
Once this is set in the file the CA Directory router service needs to be restarted or re-initialized to take effect. You can use the command below to have Directory re-read its configuration files and start the logging set.
dxserver init all
Once the servicer are restarted or reinitialized you will find that there are 2 new log files in the log folder
Router_time_date.log
Router_query_Date.log
Note: If you are on Unix you will first need to su to the dsa user (or Directory service user defined in your install).
su - dsa
Before testing the problem please note the time and recreate the problem.
Once the problem happens capture the logs in the folder below with the current date.
C:\Program Files\CA\Directory\dxserver\logs
Then remember to turn off the time and query logging with the steps below so you do not fill up all the disk space.
This trace logging can be changed in the
../dxserver/config/logging/default.dxc file by changing the line
set trace = time,query;
Change to
set trace = error;
See below EXAMPLE:
# DSA trace log - Used for debugging
set trace-log = "logs/$s_trace.log";
set trace = error;
Once this is set in the file the Directory service needs to be re-initialized or restarted again to take effect.
You can use the command below to have Directory re-read its configuration files and reset the logging to default error level.
dxserver init all
Note: If you are on Unix you will first need to su to the dsa user (or Directory service user defined in your install).
su - dsa
Feedback
