Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 341 / 374

Maintaining an Identity Server 341
n
ov
do
cx (e
n)
16
Ap
ril 20
10
14.7 Enabling Identity Server Audit Events
All user and administrator actions can be logged to Novell Audit. You can generate a Novell Audit
logging event to indicate whether authentications are successful or unsuccessful. The following
steps assume that you have already set up Novell Audit on your network. For more information, see
“
Enabling Auditing ” in the Novell Access Manager 3.1 SP2 Administration Console Guide .
1 In the Administration Console, click Devices > Identity Server > Servers > Edit > Logging .
2 In the Novell Audit Logging section, select Enabled .
3 Select the events for notification.
Select All: Select this option for all events. Otherwise, select one or more of the following:
Connection Waits The number of times that a user thread was required to wait for an LDAP
connection to become available since the Identity Server was started. A
wait would be required if the maximum number of connections allocated to
the associated connection pool were all currently in use by other threads.
Connection Waits Aborted
Due To Timeout The number of times that an LDAP connection wait terminated because of
the Identity Server timing out since the Identity Server was started. This
would result in an LDAP Service Not Available error.
Connection Waits Aborted
Due To Closed Pool The number of times that an LDAP connection wait terminated because of
a closed connection pool since the Identity Server was started. This would
normally be caused by an LDAP replica failing while the user thread is
waiting for the connection. This would result in an LDAP Service Not
Available error.
Event Description
Login Provided Generated when an identity provider sends authentication to
a service provider. Role assignment audit events are
included in authentication audit events for the Identity
Server.
Login Provided Failure Generated when an identity provider attempts to send
authentication to a service provider but fails.
Login Consumed Generated when a user is authenticated either locally or by
an external identity provider. Role assignment audit events
are included in authentication audit events for the Identity
Server.
Login Consumed Failure Generated when the Identity Server initiates authentication,
but the process fails.
Logout Provided Generated when an identity provider sends a logout request
to a service provider that it has authenticated.
Logout Local Generated when the Identity Server receives a logout
command from the user.
Federation Request Sent Generated when a service provider attempts to federate with
an identity provider.
Statistic Description