Exit Print View

Sun OpenDS Standard Edition 2.0 Administration Guide

Get PDF Book Print View
 

Document Information

Configuring the Directory Server

Configuring Security in the Directory Server

Managing Directory Data

Controlling Access To Data

Replicating Data

Managing Users and Groups

Directory Server Monitoring

Monitoring the Directory Server

Working With Monitor Providers

To View Monitor Providers

To Disable a Monitor Provider

To Create a Monitor Provider

To Delete a Monitor Provider

Viewing Monitoring Information Using the cn=monitor Entry

To View the Available Monitoring Information

To Monitor General-Purpose Server Information

To Monitor System Information

To Monitor Version Information

To Monitor the User Root Back End

To Monitor the Backup Back End

To Monitor the Tasks Back End

To Monitor the monitor Back End

To Monitor the Schema Back End

To Monitor the adminRoot Back End

To Monitor the ads-truststore Back End

To Monitor Client Connections

To Monitor the LDAP Connection Handler

To Monitor LDAP Connection Handler Statistics

To Monitor Connections on the LDAP Connection Handler

To Monitor the Administration Connector

To Monitor Administration Connector Statistics

To Monitor Connections on the Administration Connector

To Monitor the LDIF Connection Handler

To Monitor the Work Queue

To Monitor the userRoot Database Environment

To Monitor the Entry Cache

To Monitor JVM Stack Trace Information

To Monitor the JVM Memory Usage

Monitoring Using JConsole

Monitoring Using Managed Tasks

Configuring Alert Notifications and Account Status Notification Handlers

Accessing Logs

To View the Access Logs

To View the Audit Logs

To View the Debug Logs

To View the Error Logs

To View the Replication Repair Logs

To View the server.out Logs

General Purpose Enterprise Monitoring Solutions

Monitoring the Directory Server With JConsole

To Configure JMX on a Directory Server Instance

Starting JConsole

Accessing a Directory Server Instance From JConsole

Viewing Directory Monitoring Information With JConsole

Monitoring the Directory Server With SNMP

Configuring SNMP in the Directory Server

To Configure SNMP in the Directory Server

To View the SNMP Connection Handler Properties

To Access SNMP on a Directory Server Instance

SNMP Security Configuration

Monitoring the Directory Server With the Control Panel

To View Monitoring Information With the Control Panel

Configuring Logs With dsconfig

Overview of Directory Server Logs

Configuring Log Publishers

Logging Internal Operations

To Configure Log Retention Policies

To Configure Log Rotation Policies

To Configure Debug Targets

Logging Access Control Information

Differences Between Logging in Sun OpenDS Standard Edition and Sun Java System Directory Server

Configuring Alerts and Account Status Notification Handlers

Managing Alert Handlers

To View All Configured Alert Handlers

To Enable an Alert Handler

To Create a New Alert Handler

To Delete an Alert Handler

To Disable an Alert Type

Managing Account Status Notification Handlers

To View the Configured Account Status Notification Handlers

To Enable Account Status Notification Handlers

To Create a New Account Status Notification Handler

To Delete an Account Status Notification Handler

Monitoring a Replicated Topology

Monitoring Replication Status With dsreplication

Advanced Replication Monitoring

Improving Performance

Advanced Administration

Accessing Logs

The directory server provides logging mechanisms to record access, error, or debugging information for the directory server instance. Multiple loggers of a given type can be active at any time, which makes it possible to create logs for specific subtrees or different repositories. The directory server does not currently provide logging filters to restrict the type of information in the logs.

The following logs are provided:

To View the Access Logs

  1. Change to the logs directory of the server instance.
    $ cd install-dir/logs
  2. Open the access file by using a text editor or the UNIX cat command.
    $ cat access | more
    [24/Oct/2008:16:02:52 -0500] CONNECT conn=0 from=127.0.0.1 to=127.0.0.1 protocol=LDAP
    [24/Oct/2008:16:02:52 -0500] BIND conn=0 op=0 msgID=1 type=SIMPLE dn="cn=Directory 
      Manager"
    [24/Oct/2008:16:02:53 -0500] BIND conn=0 op=0 msgID=1 result="Success"
    authDN="cn=Directory Manager,cn=Root DNs,cn=config" etime=57
    ...(more output)...

To View the Audit Logs

  1. Change to the logs directory of the server instance.
    $ cd install-dir/logs
  2. Open the audit file by using a text editor or the UNIX cat command.
    $ cat audit | more
    # 05/Nov/2008:13:32:58 -0600; conn=21; op=51
    dn: cn=File-Based Audit Logger,cn=Loggers,cn=config
    changetype: modify
    replace: ds-cfg-enabled
    ds-cfg-enabled: true
    -
    replace: modifiersName
    modifiersName: cn=Directory Manager,cn=Root DNs,cn=config
    -
    replace: modifyTimestamp
    modifyTimestamp: 20081105193257Z
    # 05/Nov/2008:13:33:17 -0600; conn=21; op=57
    dn: cn=File-Based Debug Logger,cn=Loggers,cn=config
    changetype: modify
    replace: ds-cfg-enabled
    ds-cfg-enabled: true
    -
    replace: modifiersName
    modifiersName: cn=Directory Manager,cn=Root DNs,cn=config
    -
    replace: modifyTimestamp
    modifyTimestamp: 20081105193316Z
    ...(more output)...

To View the Debug Logs

  1. Change to the logs directory of the server instance.
    $ cd install-dir/logs
  2. Open the debug file by using a text editor or the UNIX cat command.
    $ cat debug | more
    [24/Oct/2008:16:02:52 -0500] CONNECT conn=0 from=127.0.0.1 to=127.0.0.1 protocol=LDAP
    [24/Oct/2008:16:02:52 -0500] BIND conn=0 op=0 msgID=1 type=SIMPLE dn="cn=Directory 
      Manager"
    [24/Oct/2008:16:02:53 -0500] BIND conn=0 op=0 msgID=1 result="Success"
    authDN="cn=Directory Manager,cn=Root DNs,cn=config" etime=57
    ...(more output)...

To View the Error Logs

  1. Change to the logs directory of the server instance.
    $ cd install-dir/logs
  2. Open the error file by using a text editor or the UNIX cat command.
    $ cat error | more
    [24/Oct/2007:16:02:10 -0500] category=CONFIG severity=NOTICE msgID=3605006
    msg=Access control has been enabled and will use the
    org.opends.server.authorization.dseecompat.AciHandler implementation
    [24/Oct/2007:16:02:17 -0500] category=JEB severity=NOTICE msgID=8847402
    msg=The database backend userRoot containing 160 entries has started
    [24/Oct/2007:16:02:21 -0500] category=CORE severity=NOTICE msgID=458887
    msg=The Directory Server has started successfully
    ...(more output)...

To View the Replication Repair Logs

  1. Change to the logs directory of the server instance.
    $ cd install-dir/logs
  2. Open the replication file by using a text editor or the UNIX cat command.
    $ cat replication | more
    [09/Oct/2007:11:02:22 -0500] category=SYNC severity=NOTICE msgID=15138878
    msg=Replication Server sr1-uaus-08/129.123.131.98:8989 now used for Replication 
    Domain cn=admin data
    [09/Oct/2007:11:02:23 -0500] category=SYNC severity=NOTICE msgID=15138878
    msg=Replication Server sr1-uaus-08/129.123.131.98:8989 now used for Replication 
    Domain cn=schema
    [09/Oct/2007:11:02:23 -0500] category=SYNC severity=NOTICE msgID=15138878
    msg=Replication Server sr1-uaus-08/129.123.131.98:8989 now used for Replication 
    Domain dc=example,dc=com
    ...(more output)...

To View the server.out Logs

  1. Change to the logs directory of the server instance.
    $ cd install-dir/logs
  2. Open the server.out file by using a text editor or the UNIX cat command.
    $ cat replication | more
    [24/Jun/2009:18:32:18 +0200] category=CORE severity=INFORMATION msgID=132 
    msg=The Directory Server is beginning the configuration bootstrapping process
    [24/Jun/2009:18:32:21 +0200] category=EXTENSIONS severity=INFORMATION msgID=1049147
    msg=Loaded extension from file '$SERVER_ROOT/lib/extensions/distribution.jar'
     (build 1.0.0, revision 1057(20090618075417))
    [24/Jun/2009:18:32:21 +0200] category=EXTENSIONS severity=INFORMATION msgID=1049147 
    msg=Loaded extension from file '$SERVER_ROOT/lib/extensions/globalindex.jar'
     (build 1.00, revision 1057(20090618075417))
    [24/Jun/2009:18:32:21 +0200] category=EXTENSIONS severity=INFORMATION msgID=1049147 
    msg=Loaded extension from file '$SERVER_ROOT/lib/extensions/loadbalancing.jar'
    (build 1.0.0, revision 1057(20090618075417))
    [24/Jun/2009:18:32:22 +0200] category=EXTENSIONS severity=INFORMATION msgID=1049147 
    msg=Loaded extension from file '$SERVER_ROOT/lib/extensions/proxyldap.jar'
    (build 1.0.0, revision 1057(20090618075417))
    [24/Jun/2009:18:32:22 +0200] category=EXTENSIONS severity=INFORMATION msgID=1049147 
    msg=Loaded extension from file '$SERVER_ROOT/lib/extensions/snmp-mib2605.jar'
    (build 2.0.0, revision 5452)
    [24/Jun/2009:18:32:25 +0200] category=CORE severity=NOTICE msgID=458886
    msg=Sun Virtual Directory Proxy 1.0.0 (OpenDS version = 2.0.0) 
    (build 20090615154012Z, R5452) starting up
    ...(more output)...