Starting and Stopping Your Server Instance
Configuring the Server Instance
Configuring the Proxy Components
Configuring Security Between Clients and Servers
Configuring Security Between the Proxy and the Data Source
Configuring Servers With the Control Panel
Monitoring Sun OpenDS Standard Edition
Configuring Logs With dsconfig
Configuring Log Retention Policies
To Create a Log Retention Policy
To Modify a Log Retention Policy
Configuring Log Rotation Policies
To Create a Log Rotation Policy
Logging Access Control Information
Differences Between Logging in Sun OpenDS Standard Edition and Sun Java System Directory Server
Configuring Alerts and Account Status Notification Handlers
To View All Configured Alert Handlers
Managing Account Status Notification Handlers
To View the Configured Account Status Notification Handlers
To Enable Account Status Notification Handlers
Monitoring the Server With LDAP
Viewing Monitoring Information Using the cn=monitor Entry
To View the Available Monitoring Information
To Monitor General-Purpose Server Information
To Monitor Version Information
To Monitor the User Root Back End
To Monitor the Backup Back End
To Monitor the monitor Back End
To Monitor the Schema Back End
To Monitor the adminRoot Back End
To Monitor the ads-truststore Back End
To Monitor the LDAP Connection Handler
To Monitor LDAP Connection Handler Statistics
To Monitor Connections on the LDAP Connection Handler
To Monitor the Administration Connector
To Monitor Administration Connector Statistics
To Monitor Connections on the Administration Connector
To Monitor the LDIF Connection Handler
To Monitor JVM Stack Trace Information
To Monitor the JVM Memory Usage
To Monitor the userRoot Database Environment
To Monitor Remote LDAP Servers
To Monitor a Global Index Catalog
Monitoring Using manage-tasks Command
To View the Replication Repair Logs
General Purpose Enterprise Monitoring Solutions
Monitoring the Server With JConsole
To Configure JMX on a Server Instance
Accessing a Server Instance From JConsole
Viewing Monitoring Information With JConsole
Monitoring the Server With SNMP
Configuring SNMP in the Server
To Configure SNMP in the Server
To View the SNMP Connection Handler Properties
To Access SNMP on a Server Instance
Monitoring a Replicated Topology
Monitoring Replication Status With dsreplication
Advanced Replication Monitoring
Monitoring the Directory Server With the Control Panel
To View Monitoring Information With the Control Panel
Monitoring the Proxy Server With the Control Panel
To View Proxy Configuration Information
To View Proxy Monitoring Information
Setting LDAP Data Source Monitoring Properties in the Proxy
Modifying Monitoring of Remote LDAP Servers
Account status notification handlers provide alerts on events during password policy processing. By default, the Error Log Account Status Notification handler is set to enabled upon initial configuration. The server writes a message to the server error log when one of the following events has been configured in the password policy and occurs during the course of password policy processing:
account-temporarily-locked
account-permanently-locked
account-unlocked
account-idle-locked
account-reset-locked
account-disabled
account-expired
password-expired
password expiring
password-reset
password-changed
The error log is located at install-dir/logs/errors.
$ dsconfig -h localhost -p 4444 -D "cn=directory manager" -w password -n \ list-account-status-notification-handlers Account Status Notification Handler : Type : enabled ------------------------------------:-----------:-------- Error Log Handler : error-log : true SMTP Handler : smtp : false
You can enable an existing account status notification handler using the dsconfig command. By default, the directory server enables the Error Log Handler when the server is initially configured. This example enables the SMTP notification handler.
$ dsconfig -h localhost -p 4444 -D "cn=directory manager" -w password -n \ get-account-status-notification-handler-prop --handler-name "SMTP Handler" \ --property enabled Property : Value(s) ---------:--------- enabled : false
$ dsconfig -h localhost -p 4444 -D "cn=directory manager" -w password -n \ set-account-status-notification-handler-prop --handler-name "SMTP Handler" \ --set property:enabled
When you specify the type, you can use either error-log or generic (default).
$ dsconfig -h localhost -p 4444 -D "cn=directory manager" -w password -n \ create-account-status-notification-handler \ --handler-name "My Password Reset Logger" --type error-log --set enabled:true \ --set account-status-notification-type:password-reset
$ dsconfig -h localhost -p 4444 -D "cn=directory manager" -w password -n \ list-account-status-notification-handlers Account Status Notification Handler : Type : enabled ------------------------------------:-----------:-------- Error Log Handler : error-log : true my Password Reset Logger : error-log : true SMTP Handler : smtp : false
You can disable an account status notification handler instead of deleting it. In this case, the alert handler is available if you need to enable it again in the future.
You can remove an account status notification handler entirely by using dsconfig.
$ dsconfig -h localhost -p 4444 -D "cn=directory manager" -w password -n \ delete-account-status-notification-handler --handler-name "My Password Reset Logger"