AppendIISServerLog formatting

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Description:

After the addition of SiteMinder on IIS 6, the username is no longer present in the IIS logs. To return the username to the log, the customer implemented AppendIISServerLog.

1. Is there any way to get rid of the SMTRANSACTIONID?
2. Is there any other way to fix this issue other than using AppendIISServerLog?
3. If there is no other way, customer wants some confirmation that the username is always preceded by comma and followed by a space and a dash.

Solution:

When AppendIISServerLog is enabled, the formatting of the data is fixed under the control of the Web Agent. There are two possible formats. If SM_USER is not set, that is the resource is unprotected and the user does not have a SiteMinder session, the following format is used:

SMTRANSACTIONID=<TRANSACTION-ID>

If SM_USER is set, then the format used is:

SMTRANSACTIONID=<TRANSACTION-ID>,<USERNAME>

This is added to the cs-uri-query field in the log file. This data is appended to the end of any existing query string data in the URI if present. AppendIISServerLog is the only mechanism available to insert the username into the IIS log.

Environment

Release:
Component: SMAPC