Troubleshooting Identity Manager Integration

To troubleshoot problems with any procedure in this chapter, try the following:

• To Enable Trace in Identity Manager

• To Inspect Log Files

• To View or Change Identity Manager System Settings

• To Inspect an Identity Manager Object

• To Update an Identity Manager Object

• To Consult Forums and Mailing Lists

To Enable Trace in Identity Manager

1. Login to the Identity Manager debug interface:

   Go to the following URL:

   http://ApplicationServerHost:Port/idm/debug

   Provide the following credentials:

   UserName:

   configurator

   Password:

   configurator

2. Click the Show Trace button.

3. In the Edit Trace Configuration window, mark Trace Enabled checkbox.

4. Add the following classes, each with a trace level of 4:

   • com.waveset.adapter.ResourceAdapterBase

   • com.waveset.adapter.SunAccessManagerRealmResourceAdapter

5. Note the default trace file location and name in the property Trace File.

   You can customize the trace file location or name.

6. Click Save.

7. Log out of the Identity Manager debug interface.

To Inspect Log Files

For the installation described in this chapter, these are the log locations:

• Application Server logs

  /opt/SUNWappserver91/domains/domain1/logs

  In the file:

  /opt/SUNWappserver91/domains/domain1/applications/ j2ee-modules/idm/config/Waveset.properties

  enable this property:

  exception.trace=true

  After you enable this property, the exception trace logging will be logged to the trace log that is mentioned in the section above. However, the property does not take effect until the GlassFish server is restarted.

• OpenSSO Enterprise Client SDK debug logs

  /opt/SUNWappserver91/domains/domain1/logs/am_debug

• OpenSSO Enterprise Server debug logs

  /opt/fam80-idm80/opensso/debug

• OpenSSO Enterprise Policy Agent debug logs

  /opt/j2ee_agents/appserver_v9_agent/Agent_001/logs/debug

To View or Change Identity Manager System Settings

Using the Identity Manager Debug Administrator Interface

The following information refers to the examples in this book. For detailed information about using the Debug Administrator Interface, see the Identity Manager Tuning, Troubleshooting, and Error Messages at http://docs.sun.com/app/docs/coll/1514.5.

URL:

http://ApplicationServerHost:Port/idm/debug

User Name:

configurator

Password:

configurator

The following Identity Manager objects were created/modified in this document:

You can view, edit, or export Identity Manager objects in xml format, or through the Get Object and List Objects buttons.

Using the Identity Manager IDE Interface

Before you begin, disable the Policy Agent on the Identity Manager server. This enables NetBeans to connect to the Identity Manager server.

1. Download NetBeans IDE 6.0. Web & Java EE edition.

2. Download the Identity Manager IDE plug-in .

3. Follow the instructions for installing the IDE Plug-in in NetBeans. Go to the following URL:

   https://identitymanageride.dev.java.net/netbeans-setup.html

   A new IDM menu item appears in the NetBeans menubar.

To Inspect an Identity Manager Object

1. Choose the "Custom Identity Manager Objects" in the Project window.

2. In the NetBeans menu, choose IDM / Open Object.

3. In the Open Object page, do this:

   Object Name: * Object Type: <select an object, ex:Resource>

   You will see that the list of Matching Objects gets populated with the objects of the selected type. In this example, if you select SunAccessManagerRealm, and OK, the object-definition will be downloaded to the project.

To Update an Identity Manager Object

To modify the object, and upload the changed object, right-click on the object in the Project window and select Identity Manager / Upload Object. The following Identity Manager objects were created or modified in this chapter:

To Consult Forums and Mailing Lists

• Sun Identity Manager Forum questions

  mailto:identityManager-technical-questions-ext@sun.com

• Sun Identity Manager IDE Plug-in related questions

  https://identitymanageride.dev.java.net/servlets/ProjectMailingListList

  https://identitymanageride.dev.java.net/servlets/ProjectForumView

• Sun OpenSSO Enterprise / Policy Agent questions

  mailto:amfm-technical-ext@sun.com

• OpenSSO questions

  https://opensso.dev.java.net/servlets/ProjectForumView