10.02.2013 Views

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

The<br />

FILE<br />

syntax<br />

<strong>for</strong><br />

the<br />

NOTICE<br />

message<br />

controls<br />

log<br />

roll<br />

over<br />

and<br />

file<br />

recycling:<br />

FILE.max_files.max_records<br />

The<br />

max_files<br />

value<br />

specifies<br />

the<br />

number<br />

of<br />

files<br />

that<br />

are<br />

used.<br />

The<br />

max_records<br />

value<br />

specifies<br />

the<br />

maximum<br />

number<br />

of<br />

entries<br />

per<br />

file.<br />

In<br />

the<br />

default<br />

example<br />

above,<br />

FILE.10.100<br />

means<br />

there<br />

are<br />

10<br />

files<br />

created,<br />

each<br />

with<br />

a<br />

maximum<br />

of<br />

100<br />

entries.<br />

The<br />

files<br />

are<br />

named:<br />

notice.log.1<br />

notice.log.2<br />

.<br />

.<br />

.<br />

notice.log.10<br />

The<br />

messages<br />

″wrap<br />

around″<br />

to<br />

the<br />

first<br />

file<br />

after<br />

the<br />

last<br />

file<br />

has<br />

reached<br />

its<br />

limit<br />

or<br />

when<br />

the<br />

server<br />

is<br />

stopped<br />

and<br />

restarted.<br />

When<br />

a<br />

log<br />

file<br />

is<br />

reused,<br />

the<br />

existing<br />

records<br />

are<br />

written<br />

over<br />

(erased).<br />

In<br />

some<br />

cases,<br />

when<br />

files<br />

are<br />

created<br />

in<br />

the<br />

background<br />

by<br />

<strong>WebSEAL</strong>,<br />

the<br />

files<br />

can<br />

be<br />

owned<br />

by<br />

root.<br />

To<br />

ensure<br />

that<br />

<strong>WebSEAL</strong><br />

can<br />

write<br />

messages<br />

to<br />

the<br />

these<br />

log<br />

files,<br />

you<br />

can<br />

optionally<br />

specify<br />

file<br />

permissions,<br />

owner<br />

and<br />

group.<br />

In<br />

the<br />

following<br />

example,<br />

the<br />

optional<br />

arguments<br />

that<br />

accomplish<br />

this<br />

are<br />

″:666:ivmgr:ivmgr″:<br />

ERROR:STDERR:-;FILE:/var/pdweb/log/msg_error.log:666:ivmgr:ivmgr<br />

Note:<br />

For<br />

more<br />

in<strong>for</strong>mation<br />

on<br />

routing<br />

file<br />

configuration<br />

options,<br />

review<br />

the<br />

routing<br />

file<br />

template<br />

that<br />

is<br />

distributed<br />

with<br />

<strong>WebSEAL</strong>.<br />

For<br />

more<br />

in<strong>for</strong>mation<br />

on<br />

<strong>Tivoli</strong><br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

support<br />

<strong>for</strong><br />

serviceability<br />

messages,<br />

see<br />

the<br />

<strong>IBM</strong><br />

<strong>Tivoli</strong><br />

<strong>Access</strong><br />

<strong>Manager</strong><br />

<strong>for</strong><br />

e-<strong>business</strong><br />

Problem<br />

Determination<br />

Guide.<br />

Serviceability<br />

messages<br />

in<br />

UTF-8<br />

<strong>for</strong>mat<br />

<strong>WebSEAL</strong><br />

produces<br />

serviceability<br />

messages<br />

using<br />

UTF-8<br />

encoding.<br />

When<br />

the<br />

operating<br />

system<br />

uses<br />

a<br />

non-UTF-8<br />

local<br />

code<br />

page,<br />

<strong>WebSEAL</strong><br />

automatically<br />

converts<br />

serviceability<br />

messages<br />

to<br />

a<br />

data<br />

<strong>for</strong>mat<br />

to<br />

match<br />

the<br />

non-UTF-8<br />

local<br />

code<br />

page.<br />

In<br />

some<br />

cases,<br />

the<br />

conversion<br />

from<br />

UTF-8<br />

to<br />

non-UTF-8<br />

encoding<br />

can<br />

result<br />

in<br />

data<br />

loss.<br />

For<br />

this<br />

reason,<br />

it<br />

is<br />

recommended<br />

that<br />

the<br />

<strong>WebSEAL</strong><br />

process<br />

run<br />

in<br />

a<br />

locale<br />

environment<br />

that<br />

uses<br />

UTF-8<br />

encoded<br />

code<br />

pages.<br />

It<br />

is<br />

possible<br />

to<br />

obtain<br />

UTF-8<br />

logs<br />

when<br />

running<br />

in<br />

a<br />

non-UTF-8<br />

locale.<br />

Use<br />

the<br />

UTF8FILE<br />

type<br />

in<br />

the<br />

routing<br />

file.<br />

For<br />

example,<br />

ERROR:UTF8FILE:/var/pdweb/log/msg__error.log<br />

For<br />

more<br />

in<strong>for</strong>mation,<br />

see<br />

the<br />

routing<br />

file<br />

template<br />

that<br />

is<br />

distributed<br />

with<br />

<strong>WebSEAL</strong>:<br />

Note<br />

that<br />

when<br />

data<br />

loss<br />

occurs,<br />

the<br />

routing<br />

file<br />

entry<br />

contains<br />

a<br />

series<br />

of<br />

question<br />

marks<br />

(????)<br />

at<br />

the<br />

location<br />

where<br />

data<br />

conversion<br />

was<br />

problematic.<br />

For<br />

more<br />

in<strong>for</strong>mation,<br />

see<br />

“Multi-locale<br />

support<br />

with<br />

UTF-8”<br />

on<br />

page<br />

44.<br />

Chapter<br />

4.<br />

Serviceability<br />

and<br />

logging<br />

97

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!