HOW TO ENABLE POLICY SERVER TRACING LOG & ADD ALL THE COMPONENTS/DATA FIELDS

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• SITEMINDER

Issue/Introduction

HOW TO ENABLE POLICY SERVER TRACING LOG & ADD ALL THE COMPONENTS/DATA FIELDS

Resolution

Using SmConsole:-

1.      Open the smconsole, go to the PROFILER tab

2.      ENABLE the “Enable Profiling” check box.

3.      Under OUTPUT, enable the “output to file” checkbox and select a location for the

Policy Server trace file.

NOTE:- The locations shown in the snapshots are the DEFAULT locations.

4.      After the above 3 steps are completed, click on “Configure Settings”

5.      To gather maximum information, please select all the components and move them to the right side (“Selected Components section”)

NOTE: - If you wish to capture any specific component information, you can add only that component, instead of all.

6.      Now go to the next “DATA” tab.

7.      On this tab, select all the DATA fields and move them to the right side (“Selected Data Fields Section”)

8.      Apply & OK.

Once all the above steps are implemented, a new smtracedefault.log file will be created.

NOTE: The changes made to the profiler take effect dynamically. A Policy Server restart is not necessary.

 

Without Using SmConsole:-

1.      Refer to this KB Article to turn on Policy Server tracing.

https://knowledge.broadcom.com/external/article?articleId=53360

2.      To add all the COMPONENTS & DATA FIELDS (which will capture maximum information), edit the smtracedefault.txt file located under <Install_Dir>\CA\siteminder\config. 

3.      Copy the below config data and paste it into your smtracedefault.txt file

components: AgentFunc, Server, IsProtected, Login_Logout, IsAuthorized, Tunnel_Service, JavaAPI, Directory_Access, ODBC, LDAP, IdentityMinder, TXM, Fed_Server, SharePointAgent, DLP

data: Date, PreciseTime, Time, Pid, Tid, SrcFile, Function, TransactionID, AgentName, Resource, User, Group, Realm, Domain, Directory, Policy, AgentType, Rule, ErrorValue, ReturnValue, ErrorString, IPAddr, IPPort, Result, Returns, CallDetail, Data, Message, ResponseTime, ObjectClass, DomainOID, SearchKey, ObjectOID, Property, AuthStatus, AuthReason, AuthScheme, CertSerial, SubjectDN, IssuerDN, SessionSpec, SessionID, CertDistPt, UserDN, Action, RealmOID, State, ClusterID, HandleCount, FreeHandleCount, BusyHandleCount, Throughput, MaxThroughput, MinThroughput, Threshold, TransactionName, Query, ActiveExpr, RequestIPAddr, Expression, CacheHits, CacheSize, RefCount, ExecutionTime, Tenant

version: 1.1 

 

4.      Save and exit.