Netscape Certificate Management System 6.1, Руководство администратора

Страница: 272 / 840

Logs
272 Netscape Certificate Management System Administrator’s Guide • February 2003
logSigning. Set to true to enable signed logging; set to false to disable signed
logging. When you enable this parameter, you must also provide a value for
the
signedAuditCertNickname
parameter. When this feature is enabled, this
log can only be viewed by an auditor. See “Signed Audit Log,” on page 265 for
more information about signed audit logs.
signedAuditCertNickname. The nickname of the certificate used to sign audit
logs. The private key for this certificate must be accessible to the subsystem in
order for it to sign the log.
events. Specifies which events will be logged to the audit log. Lists each event
separated by a comma with no spaces. You can remove events from the list. See
Table 7-3 on page 278 for a complete list of auditable logging events.
5.
Click OK.
You are returned to the Log Event Listener Management tab.
6.
Click Refresh.
Configuring Logs in the CMS.cfg File
To modify the configuration settings for logs:
1.
Stop the CMS instance.
2.
Open the
CMS.cfg
file located in the directory
<server_root>/cert-<instance>/config
3.
To create a new log, you copy all of the entries for either the system or
transactions log. These are the parameters that begin with
log.instance.Transactions or
log.instance.System
. Paste all entries at the
bottom of the logging section and change the name of this instance by
changing the word “Transactions” or “System” in each parameter to the new
name.
4.
To configure a log instance, modify the parameters associated with that log.
These parameters begin with
log.instance
and include the following
parameters:
bufferSize.
Specify the buffer size in kilobytes (KB) for the log. The default size
is 512 KB. For more information, see “Buffered Versus Unbuffered Logging”
on page 268. Once the buffer reaches this size, the contents of the buffer are
flushed out and copied to the log file.
enable. Specify
true
to enable;
false
to disable. Only enabled logs actually
record events.