Novell Access Manager 3.1 SP 2, Manual

Page: 86 / 126

86 Novell Access Manager 3.1 SP2 J2EE Agent Guide
n
ov
do
cx (e
n)
16
Ap
ril 20
10
3 Click Apply Changes .
4 To trace policy enforcement, you also need to enable and set the level of logging for the
Embedded Service Provider.
5.1.2 Enabling the Auditing of Events
The Access Manager ships with a Novell Audit server that is installed when you install the first
instance of the Administration Console. You can configure the J2EE Agent to send events to this
audit server or to another Novell Audit server on your network. (To configure access to the Novell
Audit server, .
1 In the Administration Console, click Devices > J2EE Agents > Edit .
2 In the Audit Configuration section, select from the following events:
3 Click OK , then click Update > OK .
5.2 Managing Embedded Service Provider
Certificates
You can view and modify the private keys, certificate authority (CA) certificates, and certificate
containers associated with the Embedded Service Provider. The Embedded Service Provider module
is the J2EE Agent module that communicates with the Identity Server. This module handles all the
authentication requests that need to be forwarded to the Identity Server for verification.
1 In the Administration Console, click Devices > J2EE Agents > Edit .
Event Description
Startup, shutdown, and
reconfigure Generated when the agent is started or stopped and when the
configuration of the agent is modified.
Successful authentications Generated when someone successfully authenticates to the
agent.
Allowed EJB access Generated when someone is granted access to Enterprise
JavaBeans.
Allowed web resource access Generated when someone is granted access to a Web
resource.
Allowed clear text access Generated when a user is granted clear text access to a Web
resource.
Denied clear text access Generated when someone is denied clear text access to a Web
resource.
Unsuccessful authentications Generated when someone is unsuccessful in attempting to
authenticate.
Denied EJB access Generated when someone is denied access to Enterprise
JavaBeans.
Denied web resource access Generated when someone is denied access to a Web
resource.