Novell ACCESS MANAGER 3.1 SP2 - README 2010, Manual

Page: 57 / 374

Configuring an Identity Server 57
n
ov
do
cx (e
n)
16
Ap
ril 20
10
3d Delete all the log files in the
/opt/nfast/log
directory.
3e Start nfast with the following command:
/opt/nfast/sbin/init.d-nfast start
3f
Start Tomcat with the following command
/etc/init.d/novell-tomcat5 start
3g Wait a minute, then list the files in the
/opt/nfast/log
directory.
The nfast client creates the log files and assigns the correct owners and rights.
4 Enable Identity Server logging and view the
catalina.out
file.
4a In the Administration Console, click Devices > Identity Servers > Edit > Logging .
4b Configure the following options:
File Logging: Specify enabled.
Echo to Console: Select this option.
Component File Logger Levels: Set Application to debug .
4c Click OK , then update the Identity Server.
4d Delete the current
catalina.out
file in the
/var/opt/novell/tomcat5/logs
directory.
4e Restart Tomcat by entering the following command:
/etc/init.d/novell-tomcat5 restart
4f To tail the
catalina.out
file, enter the following command:
tail -f /var/opt/novell/tomcat5/logs/catalina.out
4g
Search for a list of providers. When nCipher is working, the file contains entries similar to
the following nCipher entries:
Security Providers:
SUN: 1.42
SUN (DSA key/parameter generation; DSA signing; SHA-1, MD5
digests; SecureRandom; X.509 certificates; JKS keystore; PKIX
CertPathValidator; PKIX CertPathBuilder; LDAP, Collection CertStores)
SunJSSE: 1.42
Sun JSSE provider(implements RSA Signatures, PKCS12, SunX509
key/trust factories, SSLv3, TLSv1)
SunRsaSign: 1.42
SUN's provider for RSA signatures
SunJCE: 1.42
SunJCE Provider (implements DES, Triple DES, AES, Blowfish,
PBE, Diffie-Hellman, HMAC-MD5, HMAC-SHA1)
SunJGSS: 1.0
Sun (Kerberos v5)
nCipherRSAPrivateEncrypt: 1.008004
RSA private key encrypt handling provider
nCipherKM: 1.008004
nCipher Secure Key Management
BC: 1.28
BouncyCastle Security Provider v1.28
SAML: 1.0
SAML SASL Mechanism