Description:
To determine why authorizations are failing, we will need to get traces from EEM. This debugging will enable EEM and ispUtil messages from within the Application Server.
Solution:
To enable ispUtil/EEM messages in the Application Server, you can make the following modifications to the $AUTOUSER/eiam.server.config file:
<SDK type="C++"> <iTechSDK> ... <Debug> <!--possible values are ERROR/WARNING/TRACE/NOLEVEL--> <logLevel>TRACE</logLevel>
... </Debug> </iTechSDK>
Also open the $AUTOUSER/logger.server.config file
At the near bottom of the file find the following:
<root> <priority value="error" /> <!-- <appender-ref ref="SDK" /> --> <!-- <appender-ref ref="Console" /> --> </root>
Replace with:
<root> <priority value="trace" /> <!-- <appender-ref ref="SDK" /> --> <!-- <appender-ref ref="Console" /> --> </root>
Additional logging files would then be written to $AUTOUSER/audit
See "CA Embedded Entitlements Manager r8.4 SR02 Readme" for more details regarding logging.