Exit Print View

Sun OpenDS Standard Edition 2.0 Administration Guide

Get PDF Book Print View
 

Document Information

Configuring the Directory Server

Configuring Security in the Directory Server

Managing Directory Data

Controlling Access To Data

Replicating Data

Managing Users and Groups

Directory Server Monitoring

Monitoring the Directory Server

Working With Monitor Providers

To View Monitor Providers

To Disable a Monitor Provider

To Create a Monitor Provider

To Delete a Monitor Provider

Viewing Monitoring Information Using the cn=monitor Entry

To View the Available Monitoring Information

To Monitor General-Purpose Server Information

To Monitor System Information

To Monitor Version Information

To Monitor the User Root Back End

To Monitor the Backup Back End

To Monitor the Tasks Back End

To Monitor the monitor Back End

To Monitor the Schema Back End

To Monitor the adminRoot Back End

To Monitor the ads-truststore Back End

To Monitor Client Connections

To Monitor the LDAP Connection Handler

To Monitor LDAP Connection Handler Statistics

To Monitor Connections on the LDAP Connection Handler

To Monitor the Administration Connector

To Monitor Administration Connector Statistics

To Monitor Connections on the Administration Connector

To Monitor the LDIF Connection Handler

To Monitor the Work Queue

To Monitor the userRoot Database Environment

To Monitor the Entry Cache

To Monitor JVM Stack Trace Information

To Monitor the JVM Memory Usage

Monitoring Using JConsole

Monitoring Using Managed Tasks

Configuring Alert Notifications and Account Status Notification Handlers

Accessing Logs

To View the Access Logs

To View the Audit Logs

To View the Debug Logs

To View the Error Logs

To View the Replication Repair Logs

To View the server.out Logs

General Purpose Enterprise Monitoring Solutions

Monitoring the Directory Server With JConsole

To Configure JMX on a Directory Server Instance

Starting JConsole

Accessing a Directory Server Instance From JConsole

Viewing Directory Monitoring Information With JConsole

Monitoring the Directory Server With SNMP

Configuring SNMP in the Directory Server

To Configure SNMP in the Directory Server

To View the SNMP Connection Handler Properties

To Access SNMP on a Directory Server Instance

SNMP Security Configuration

Monitoring the Directory Server With the Control Panel

To View Monitoring Information With the Control Panel

Configuring Logs With dsconfig

Overview of Directory Server Logs

Configuring Log Publishers

Logging Internal Operations

To Configure Log Retention Policies

To Configure Log Rotation Policies

To Configure Debug Targets

Logging Access Control Information

Differences Between Logging in Sun OpenDS Standard Edition and Sun Java System Directory Server

Configuring Alerts and Account Status Notification Handlers

Managing Alert Handlers

To View All Configured Alert Handlers

To Enable an Alert Handler

To Create a New Alert Handler

To Delete an Alert Handler

To Disable an Alert Type

Managing Account Status Notification Handlers

To View the Configured Account Status Notification Handlers

To Enable Account Status Notification Handlers

To Create a New Account Status Notification Handler

To Delete an Account Status Notification Handler

Monitoring a Replicated Topology

Monitoring Replication Status With dsreplication

Advanced Replication Monitoring

Improving Performance

Advanced Administration

Managing Alert Handlers

The directory server supports the following alert handlers:

To View All Configured Alert Handlers

The directory server stores alert handlers information in the configuration file under the cn=Alert Handlers,cn=config subtree. You can access the information using the dsconfig command.

To Enable an Alert Handler

The JMX alert handler is disabled by default. Before you begin, you must configure JMX on the directory server. For more information, see Monitoring the Directory Server With JConsole.

  1. To list the alert handler's properties, use the dsconfig command as follows.
    $ dsconfig -D "cn=directory manager" -w password -n get-alert-handler-prop \
      --handler-name "JMX Alert Handler"
    Property            : Value(s)
    --------------------:---------------------------------------------
    disabled-alert-type : -
    enabled             : false
    enabled-alert-type  : -
  2. To enable the alert handler, use dsconfig as follows.
    $ dsconfig -D "cn=directory manager" -w password -n set-handler-prop \
      --handler-name "JMX Alert Handler" --set enabled:true
  3. (Optional) Verify the change by using dsconfig.
    $ dsconfig -D "cn=directory manager" -w password -n get-alert-handler-prop \
      --handler-name "JMX Alert Handler"
    Property            : Value(s)
    --------------------:---------------------------------------------
    disabled-alert-type : -
    enabled             : true
    enabled-alert-type  : -

To Create a New Alert Handler

You can create a new alert handler by using dsconfig. This example configures a new SMTP handler. Before starting this procedure, ensure that you have configured an SMTP server for your directory.

  1. Use dsconfig with the create-alert-handler subcommand to create the handler.
    $ dsconfig -D "cn=directory manager" -w password -n create-alert-handler \
      --handler-name "my SMTP Handler" --type smtp --set enabled:true \
      --set message-body:"Alert Type: %%alert-type%%\n\nAlert ID: \
      %%alert-id%%\n\nAlert Message: %%alert-message%%" \
      --set message-subject:"Alert Message" \
      --set recipient-address:directorymanager@example.com \
      --set sender-address:OpenDS-Alerts@directory.example.com
  2. (Optional) View the list of alert handlers by using dsconfig.
    $ dsconfig -D "cn=directory manager" -w password -n list-alert-handlers

To Delete an Alert Handler

Note that you can disable an alert handler instead of deleting it. In this case, the alert handler is available if you need to enable it again in the future. This example removes an alert handler from the directory server.

Supported Alert Types

The directory server sends out message alerts when an alert type event occurs in the system. The supported alert types are defined in the following table.

Alert Type
Java Class
Description
Access Control Disabled
org.opends.server.AccessControlDisabled
Notify administrator that the access control handler has been disabled.
Access Control Enabled
org.opends.server.Enabled
Notify administrator that the access control handler has been enabled.
Access Control Parse Failed
org.opends.server.authentication.dseecompat.ACIParseFailed
Notify administrator if the DSEE compatible access control subsystem failed to correctly parse one or more ACI rules when the server is first started.
Backend Environment Unusable
org.opends.server.BackendRunRecovery
Notify administrator that the JE back end throws a RunRecoveryException and the directory server needs to be restarted.
Cannot Copy Schema Files
org.opends.server.CannotCopySchemaFiles
Notify administrator if a problem occurs while attempting to create copies of the existing schema configuration before making a schema update, and the schema configuration is left in a potentially inconsistent state.
Cannot Find Recurring Task
org.opends.server.CannotFindRecurringTask
Notify administrator if the directory server is unable to locate a recurring task definition in order to schedule the next iteration once the previous iteration has completed.
Cannot Rename Current Task File
org.opends.server.CannotRenameCurrentTaskFile
Notify administrator if the directory server is unable to rename the current tasks backing file in the process of trying to write an updated version.
Cannot Rename New Task File
org.opends.server.CannotRenameNewTaskFile
Notify administrator if the directory server is unable to rename the new tasks backing file into place.
Cannot Schedule Recurring Iteration
org.opends.server.CannotScheduleRecurringIteration
Notify administrator if the directory server is unable to schedule an iteration of a recurring task.
Cannot Write Configuration
org.opends.server.CannotWriteConfig
Notify administrator if the directory server is unable to write its updated configuration for some reason and so the server cannot exhibit the new configuration if it is restarted.
Cannot Write New Schema Files
org.opends.server.CannotWriteNewSchemaFiles
Notify administrator if a problem occurs while attempting to write new versions of the server schema configuration files, and the schema configuration is left in a potentially inconsistent state.
Cannot Write Task File
org.opends.server.CannotWriteTaskFile
Notify administrator if the directory server is unable to write an updated tasks backing file for some reason.
Entering Lockdown Mode
org.opends.server.EnteringLockdownMode
Notify administrator that the directory server is entering lockdown mode, in which only root users will be allowed to perform operations and only over the loopback address.
LDAP Connection Handler Consecutive Failures
org.opends.server.LDAPHandlerDisabledByConsecutiveFailures
Notify administrator of consecutive failures that have occurred in the LDAP connection handler that have caused it to become disabled.
LDAP Connection Handler Uncaught Error
org.opends.server.LDAPHandlerUncaughtError
Notify administrator of uncaught errors in the LDAP connection handler that have caused it to become disabled.
LDIF Backend Cannot Write Update
org.opends.server.LDIFBackendCannotWriteUupdate
Notify administrator that an LDIF back end was unable to store an updated copy of the LDIF file after processing a write operation.
LDIF ConnHandler Parse Error
org.opends.server.LDIFConnectionHandlerParseError
Notify administrator that the LDIF connection handler encountered an unrecoverable error while attempting to parse an LDIF file.
LDIF ConnHandler IO Error
org.opends.server.LDIFConnectionHandlerIOError
Notify administrator that the LDIF connection handler encountered an I/O error that prevented it from completing its processing.
Leaving Lockdown Mode
org.opends.server.LeavingLockdownMode
Notify administrator that the directory server is leaving lockdown mode.
Manual Config Edit Handled
org.opends.server.ManualConfigEditHandled
Notify administrator if the directory server detects that its configuration has been manually edited with the server online and those changes were overwritten by another change made through the server. The manually-edited configuration will be copied off to another location.
Manual Config Edit Lost
org.opends.server.ManualConfigEditLost
Notify administrator if the directory server detects that its configuration has been manually edited with the server online and those changes were overwritten by another change made through the server. The manually-edited configuration could not be preserved due to an unexpected error.
Replication Unresolved Conflict
org.opends.server.replication.UnresolvedConflict
Notify administrator if the multimaster replication cannot automatically resolve a conflict.
Server Started
org.opends.server.DirectoryServerStarted
Notify administrator that the directory server has completed its startup process.
Server Shutdown
org.opends.server.DirectoryServerShutdown
Notify administrator that the directory server has begun the process of shutting down.
Uncaught Exception
org.opends.server.UncaughtException
Notify administrator if a directory server thread has encountered an uncaught exception that caused the thread to terminate abnormally. The impact that this problem has on the directory server depends on which thread was impacted and the nature of the exception.
Unique Attr Sync Conflict
org.opends.server.UniqueAttributeSynchronizationConflict
Notify administrator that a unique attribute conflict has been detected during synchronization processing.
Unique Attr Sync Error
org.opends.server.UniqueAttributeSynchronizationError
Notify administrator that an error occurred while attempting to perform unique attribute conflict detection during synchronization processing.

To Disable an Alert Type

By default, all alert types are allowed. If you specify a value for the enabled-alert-type property, only alerts with one of those types are allowed. If you specify a value for the disabled-alert-type property, all alert types except for the values in that property are allowed. Alert types are specified by their Java class, as shown in this example.