ACS 5.4, logging configuration.

Hello.
I'm using ACS 5.4p2 within distributed systems: one primary and one secondary instance.
For now, primary instance is acting as Log Collector server and I can see any AAA audit logs.
When the primary instance fails I can authenticate successfully using the secondary instance.
However, when primary instance comes back, I'm not able to see any audit logs operated by secondary.
Please, can someone help me?
I'm trying different configuration without success!
Thanks.
Regards.
Andrea

Yes, it is strange. I'm thinking I'm missing something on my configuration.
This morning, I'm started with a fresh ACS 5.4 installation, install license, create one AAA client and one user. Then add the secondary instance an wait it to be updated.
Log collector runs on primary and logs AAA audit correctly from primary and secondary instances.
Log recovery is enabled: run every 10 minutes.
When the primary instance is down I can auhenticate on secondary one without any problems.
When the primary instance come back I'm able to see only failed AAA log coming from secondary during the primary fault.
Any ideas?
Yes, it is strange. I'm thinking I'm missing something on my configuration.
This morning, I'm started with a fresh ACS 5.4 installation, install license, create one AAA client and one user. Then add the secondary instance an wait it to be updated.
Log collector runs on primary and logs AAA audit correctly from primary and secondary instance.
Log recovery is enabled.
When the primary instance is down I can auhenticate on secondary instance without any problem.
When the primary instance come back I'm able to see only failed AAA log coming from secondary during the primary fault.
Any ideas?

Similar Messages

Cisco ISE log configuration commands enetered on routers

Hello,
I am trying to migrate from Cisco ACS to ISE.
I want to log configuration commands entered on routers.
I have configured the routers to send accounting radius to ISE but ISE sees the messages as:
"22003 Missing attribute for authentication
11014 RADIUS packet contains invalid attribute(s)"
Can I configure ISE to receive radius accounting messages ?
Is there another way to configure ISE to log configuration commands ?
Another way would be to send syslog messages using the archive configuration on routers, but I cannot find the syslog mesages on ISE.
Regards,
Bogdan

You should post your question on the AAA forum
https://supportforums.cisco.com/community/netpro/security/aaa
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

ACS 5.1 logging

Hi,
i have installed ACS 5.1.0.44 demo (demo license) on ESX VM 4.0, everything works fine.But i have a problem is the logging.
1- i have configured the ACS to use remote log server, it sends the logs to the server in a very detail way.
the question is how i can define certain attribute in the log send? For example, how to send only in the log the following attribute: remote-address, meaasge, severity , time , date, and facility.
the below is ONE log send from ACS to GFI log server
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 0 2010-06-23 18:01:55.897 +00:00 0000008864 3302 NOTICE Tacacs-Accounting: TACACS+ Accounting STOP, ACSVersion=acs-5.1.0.44-B.2347,
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 1 ConfigVersionId=167, Device IP Address=10.39.2.26, RequestLatency=0, NetworkDeviceName=switch26, Type=Accounting,
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 2 Privilege-Level=1, Service=Login, User=user1, Port=tty5, Remote-Address=10.39.24.7, Authen-Method=TacacsPlus, AVPair=task_id=76,
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 3 AVPair=timezone=UTC, AVPair=start_time=1277296026, AVPair=disc-cause=9, AVPair=disc-cause-ext=2, AVPair=pre-session-time=0,
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 4 AVPair=elapsed_time=9158, AcctRequest-Flags=Stop, Service-Argument=shell, AcsSessionID=acs-demo/66496449/326,
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 5 SelectedAccessService=Default Device Admin, Step=13006 , Step=15008 , Step=15004 , Step=15012 , Step=13035 ,
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 6 NetworkDeviceGroups=Device Type:All Device Types, NetworkDeviceGroups=Location:All Locations,
Jun 23 17:59:45 10.39.250.11 Jun 23 18:01:55 acs-demo CSCOacs_TACACS_Accounting 0000000134 8 7 Response={Type=Accounting; AcctReply-Status=Success; }
2- can i configure ACS, to send the logs that are not sent when the log server is down, after the log server has been restored and up
i.e. re-synchronizing???
Please , i will appreciate if anyone can help
Regards,
George

Hi,
In ACS 5.x you can only define one syslog server on the CLI.
However, via the GUI I belive you can define as many you want (i never reached any limit...)
Please find complete info at:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/user/guide/logging.html.
HTH,
Tiago

ACS 5.4 logs

Hi there people!
Im currently deploying ACS 5.4 for our network and i have some questions regarding logging events on ACS. I have read all the documents that come with ACS regarding logging but im still a bit confused.
As of now ACS should have been running for about a month. I however can only see a maximum of 1-2 days of logs within the monitoring interface. I can however retrieve the last 7 days from the CLI.
Is there a way to configure ACS to show more entries within the web interface? Or even create custom reports with TACACS events (authentication, authorization and accounting) from within the monitoring viewer?
Another thing, we have 2 ACS systems installed one being the primary and the other the secondary instance. However, when primary instance, which is also the main log collector, goes down, we get no logs from the secondary acs....Is there a way around this?
Thanks for a ny pointers in advance!

Hi,
Data retention limit:
Customize reports:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/user/guide/viewer_reporting.html#wp1133308
Workaround to that issue is keep the secondary ACS as the log collector.
**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**
Please Rate if helpful.
Regards
Ed

Cisco ACS 5.2 logs

Hi
Just looking if anyone know how to delete the accounting/authorization Reports or logs ?
Screenshot has attached herewith for reference.
Thanks.
Regards
Santosh

Under System Administration , log configuration, local log target, ther's a spot where you configure for how long you keep the logs in ACS.
if you change for one day then your logs wiill be deleted, and also ele all the logs.
But i think this is for all the logs, so if you want to delete these records then you have to delete all of them.
Anterov

Can not find Save botton in log configure.

Hi,
I want to change the log severity level from some application. I went to log configuration and I clicked the button for "change on selected node". However, I could not find any "Save" or "Apply" button. When I exit the page, system showed me "you will lost the unsaved data". Does anybody know how to save it? Thank you.

Hi,
Which SP level you are on? If you are on NW04 SPS12 or NW04s SPS02 or below upgrade that to NW04 SP 13 of the J2EE Engine 6.40 or NW04s SPS 03 of the J2EE Engine 6.40s or higher level.
If it is not possible due to any reason apply sap.com_tclmwebadminlog_configwd.sda
by following the note 656711.
Reward points for useful answers
Regards,
Phani

How to log to a file using the log-configuration.xml?

Hello *,
I created following log-configuration.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE log-configuration SYSTEM "log-configuration.dtd">
<log-configuration>
     <log-formatters>
          <log-formatter name="DefaultFormatter" pattern="%25d %-60l %s: %m" type="TraceFormatter"/>
     </log-formatters>
     <log-destinations>
          <log-destination count="10" effective-severity="ALL" limit="1000000" name="DefaultDestination" pattern="FDLB_GUI.%g.trc" type="FileLog">
               <formatter-ref name="DefaultFormatter"/>
          </log-destination>
     </log-destinations>
     <log-controllers>
          <log-controller effective-severity="ALL" maximum-severity="FATAL" minimum-severity="DEBUG" name="DefaultController">
               <associated-destinations>
                    <destination-ref association-type="LOG" name="DefaultDestination"/>
               </associated-destinations>
          </log-controller>
     </log-controllers>
</log-configuration>
From a Web Dynpro view I want to use the log-controller. I'm using the default logger:
Logging location.
private static final com.sap.tc.logging.Location logger =
    com.sap.tc.logging.Location.getLocation(EinstiegView.class);
In the wdInit method I want to log a simple message:
public void wdDoInit()
    //@@begin wdDoInit()
    logger.setEffectiveSeverity(com.sap.tc.logging.Severity.ALL);
    logger.fatalT("test logging to new file logger");
    //@@end wdDoInit()
I see the message in the defaultTrace.0.log, but my own log file doesn't appear.
How to address the log-controller of my log-configuration.xml?
Thanks in advance,
Jürgen Dufner

Hi,
I guess the follwing part of your log-configuration is wrong:
<log-controller
effective-severity="ALL"
maximum-severity="FATAL" m
nimum-severity="DEBUG"
name="DefaultController">
Try to change in log-configuration the value for name in <log-controller> to the start sequence of the packages to be logged. E.g., all our packages should start with com.yourcompanyname.projectname
To log all messages from classes in these packages make the name = com.yourcompanyname.projectname.
Hope that helps,
Regards, Astrid
Therefore I list

Java.lang.NoClassDefFoundError: com/sap/tc/logging/Configurator

I have installed this NWDS 2.0.12. When I click on the icon from desktop, I see a splash screen for a second and then immediately an error message saying 'Problem during startup. Check the .log file in .metadata folder of your workspace.'
Following is the log file
!SESSION -
!ENTRY org.eclipse.core.launcher 4 0 Jun 29, 2006 16:09:37.302
!MESSAGE Exception launching the Eclipse Platform:
!STACK
java.lang.NoClassDefFoundError: com/sap/tc/logging/Configurator
     at java.lang.Class.getDeclaredConstructors0(Native Method)
     at java.lang.Class.privateGetDeclaredConstructors(Class.java:1618)
     at java.lang.Class.getConstructor0(Class.java:1930)
     at java.lang.Class.getConstructor(Class.java:1027)
     at org.eclipse.core.internal.plugins.PluginDescriptor.internalDoPluginActivation(PluginDescriptor.java:709)
     at org.eclipse.core.internal.plugins.PluginDescriptor.doPluginActivation(PluginDescriptor.java:188)
     at org.eclipse.core.internal.plugins.PluginClassLoader.activatePlugin(PluginClassLoader.java:112)
     at org.eclipse.core.internal.plugins.PluginClassLoader.internalFindClassParentsSelf(PluginClassLoader.java:185)
     at org.eclipse.core.internal.boot.DelegatingURLClassLoader.findClassParentsSelf(DelegatingURLClassLoader.java:485)
     at org.eclipse.core.internal.boot.DelegatingURLClassLoader.loadClass(DelegatingURLClassLoader.java:882)
     at org.eclipse.core.internal.boot.DelegatingURLClassLoader.loadClass(DelegatingURLClassLoader.java:862)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:235)
     at org.eclipse.core.internal.plugins.PluginDescriptor.createExecutableExtension(PluginDescriptor.java:130)
     at org.eclipse.core.internal.plugins.PluginDescriptor.createExecutableExtension(PluginDescriptor.java:167)
     at org.eclipse.core.internal.plugins.ConfigurationElement.createExecutableExtension(ConfigurationElement.java:103)
     at org.eclipse.core.internal.runtime.InternalPlatform.loaderGetRunnable(InternalPlatform.java:578)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at org.eclipse.core.internal.boot.InternalBootLoader.getRunnable(InternalBootLoader.java:471)
     at org.eclipse.core.internal.boot.InternalBootLoader.run(InternalBootLoader.java:854)
     at org.eclipse.core.boot.BootLoader.run(BootLoader.java:461)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:324)
     at com.sap.ide.eclipse.startup.Main.basicRun(Main.java:286)
     at com.sap.ide.eclipse.startup.Main.run(Main.java:784)
     at com.sap.ide.eclipse.startup.Main.main(Main.java:602)
Can somebody help me to resolve this? What should be the potential cause for the error?

java.lang.NoClassDefFoundError: <b>com/sap/tc/logging/Configurator</b>
Either a missing jar or the classpath is not defined right.

E-Commerce Catalog error and log configurator probelm?

Hello,
I am trying to browse a B2B shop (http://server:port/b2b/b2b/init.do) in CRM 5.0 and getting following error message:
The catalog that you have selected is currently unavailable; try again later
I am using CRM 5.0 System (IDES Client) and basically trying to setup a E-Commerce development environment.
Following are the steps i have done so far for E-Commerce configuration:
1. Configured ISADMIN (http://server:port/isauseradm/admin/xcm/init.do).
1.1 Changed following params for Start->General Application Settings->Customer->isauseradm->isauseradmconfig:
>> SSLEnabled: false
>> appinfo: true
>> show start.jsp: true
>> AddUserToPartner: true
>> AcceptExistingUser: true
1.2 Created a new JCo connection under Start->Components->Customer->jco and entered my back end CRM System details and saved it as CRM_800_JCO. I also did Run Test which was successful.
1.3 Created a new JCo connection under Start->Application Configurations->Customer and entered following params and saved it with name CRM_800_ISAUSERADMSTD:
>> Base configuration: isauseradmStandard
>> default configuration: X
>> active configuration: X
>> jcodata: CRM_800_JCO
>> backendtype: crmdefault
>> usertype: CRM_Standalone
>> uidata: default
2. Configured B2B (http://server:port/b2b/admin/xcm/init.do).
2.1 Changed following params for Start->General Application Settings->Customer->b2b->b2bconfig:
>> SSLEnabled: false
>> appinfo: true
>> show start.jsp: true
2.2 Created a new JCo connection under Start->Components->Customer->jco and entered my backend CRM System details and saved it as CRM_800_JCO. I also did Run Test which was successful.
2.3 Created a new JCo connection under Start->Application Configurations->Customer and entered following params and saved it with name CRM_800_B2BCRMSTD:
>> Base configuration: b2bcrmstandard
>> default configuration: X
>> active configuration: X
>> jcodata: CRM_800_JCO
>> usertype: CRM_Standalone
3. I was really not sure if ShopAdmin config is required or not but i did it. Configured SHOPADMIN (http://server:port/shopadmin/admin/xcm/init.do).
3.1 Changed following params for Start->General Application Settings->Customer->shopadmin->shopadminconfig:
>> SSLEnabled: false
>> appinfo: true
>> show start.jsp: true
3.2 Created a new JCo connection under Start->Components->Customer->jco and entered my backend CRM System details and saved it as CRM_800_JCO. I also did Run Test which was successful.
3.3 Created a new JCo connection under Start->Application Configurations->Customer and entered following params and saved it with name CRM_800_CRMSHOP:
>> Base configuration: crmshop
>> default configuration: X
>> active configuration: X
>> jcodata: CRM_800_JCO
4. Restarted CRM J2EE.
5. Setup TREX 7.0.
5.1 From TREX Administration, created a new connection (Type A, i.e., using System Number and Application Server Host) for CRM System and also RFC Dest. (sm59) in CRM System.
5.2 Restarted TREX and connected this connection.
5.3 Following are the visible column values for this connection in TREX Administration:
>> Connection Status: <connected>
>> Configuration Satus: Green
>> SAP System: CRM
>> RFC Destination: TREX_DEFAULT
>> Gateway: local
>> RfcServer Instances: 1 (no automatic changes)
>> TREXRfcServer Processes: 1
>> Workprocesses: 6 (4 DIA, 2BGD)
5.4 Did a RFC Connection test in CRM System using SM59 which was successful as well.
5.5 Using Transaction SRMO (Retrieval : Search Server Relation Monitor) in CRM System changed the RFC Destination for Search server ID DRFUZZY (for both I and S type RFC Server destination action) to TREX_DEFAULT. Did a connection test for this and it was successful.
6. Initiated Replication using transaction COMM_PCAT_IMS_INIT with following params:
>> Product Catalog: PCSHOP
>> Variant: VAR_EN
>> Search Server Relation: DRFUZZY
>> Publishing Computer ID:
>> Allows Parallel Processing:
>> Publish Documents via HTTP:
>> Transfer Document Content: X
>> Package Size of Indexing: 5,000
>> Processing Existing Indexes: Overwrite Index Only When OK
>> Behavior when Error Messages Occur: Cancel Variant Replication
7. Logged into ISADMIN User Config (http://server:port/isauseradm/useradmin/init.do) and created a new user using the option New User and New Contact Person with an existing company of type Sold-To Party and which belongs to the sales area that is linked with PCSHOP Product Catalog (from IDES data).
Now, when i log into B2B Page (http://server:port/b2b/b2b/init.do) using the newly created user and click on the shop PC4BIZ_EN i get following error message:
The catalog that you have selected is currently unavailable; try again later
I also created a new Product Catalog and did the Initial Replication still getting the same above error message.
Can anyone please tell me what am i missing or what mistake i have done?
I even restarted CRM System, but the result is still the same.
Also, how do i check the log files for B2B? I checked the E-Commerce Admin Console (http://server:port/b2b/admin/index.jsp) and clicked on the logging link, but i get the following message:
Logging is now configured centrally in the J2EE Engine Visual Administrator (server service: Log Configurator)
How exactly do i configure and what is the right path for B2B Logging in J2EE Visual Administrator? And where will the log files for B2B be stored on the server?
I would really appreciate (and of course award points) for your help on this.
thanks and regards,
Vasu

Thanks for the Note reference. I will go through it now and try to check the log files.
And regarding the error message i don't think it could be because of The Catalog variant is not set right in the Shopadmin application as all the values in Shopadmin seem to be correct. Anyhow following are the current values selected for the custom Product Catalog I created:
Shop Id: ZTEST
General Information
--> Usage
> Business Scenario: Internet Sales B2B
--> Authorizations
> Authorization Group: <blank>
--> User Administration
> Partner Function Contact Person: 00000015
> Country Group: <blank>
--> Billing Documents
> Display of Billing Documents: No Billing Documents
--> Store Locator
> Display Store Locator: <blank>
Catalog
--> Product Catalog
> Catalog Search: <blank>
> Catalog: ZTEST
> Catalog Variant: VAR_EN
> Catalog View: <blank>
> Hide Internal Catalog: <blank>
> Controlling Price Determination in the Catalog: via IPC
> Profile group for pricing related attributes for exchange products: <blank>
Transactions
--> General
> Allow transaction management for other business partners in hierarchy: <blank>
> Large Documents: Display All Items
> Document type can be chosen late: <blank>
> Batch Processing Permitted: <blank>
> Display product determination information: X
--> Order
> Choose Order Types: Order Type
> Order Type: ISBB
--> Order Template
> Order Templates Allowed: X
> Order Type: ISBB
--> +Quotations
> Creating a Quotation: No Quotation
--> Contracts
> Contract Determination: <blank>
--> Contract Negotiations
> Allow Contract Negotiations: <blank>
Marketing
--> Global Product Recommendation
> Display Global Product Recommendation: <blank>
--> Personalized Product Recommendation
> Display Personalized Product Recommendation: <blank>
--> +Product-Related Proposals +
> Display Product-Related Proposals: <blank>
--> +Campaigns +
> Allow manual entry of campaigns: <blank>
Auction
--> Auction
> Auctions allowed: <blank>
Regarding the reason "The Catalog was not replicated properly and is hence unavailable on TREX", is there any way to verify this? When i ran Initial Replication (transaction COMM_PCAT_IMS_INIT with the values i said in my first post) everything was green.
Also, how do i clear the Catalog Cache? Is it the same as clearing the Catalog Cache Statistics in E-Commerce Administration Console (http://server:port/b2b/admin/index.jsp)?
Thanks and Regards,

Logging configuration problem

Hi all
I am working with JRun4. My problem is logging.
logging mechanism can send messages to these destinations:
1) The console screen
2) The Log file.
In both cases , logging information is obtained. but The console screen shows information which i print by System.out.println() , and The log file shows information which is Event generated. I want to store information in a file , which is given by System.out.printlln().
I have done entries in jrun.xml as
<service class="jrunx.logger.LoggerService" name="LoggerService">
<attribute name="format">{server.date} {log.level}{log.exception}</attribute>
<attribute name="errorEnabled">true</attribute>
<attribute name="warningEnabled">true</attribute>
<attribute name="infoEnabled">true</attribute>
<attribute name="debugEnabled">false</attribute>
<attribute name="metricsEnabled">true</attribute>
<attribute name="metricsLogFrequency">60</attribute>
<attribute name="metricsFormat">Web threads(busy/total): {jrpp.busyTh}/{jrpp.totalTh} Sessions: {sessions} Total Memory={totalMemory} Free={freeMemory}</attribute>
<service class="jrunx.logger.ThreadedLogEventHandler" name="ThreadedLogEventHandler" >
<service class="jrunx.logger.ConsoleLogEventHandler" name=":service=ConsoleLogEventHandler"/>
<service class="jrunx.logger.FileLogEventHandler" name="FileLogEventHandler">
<attribute name="filename">{jrun.rootdir}/logs/{jrun.server.name}-event.log</attribute>
<attribute name="rotationSize">200k</attribute>
<attribute name="rotationFiles">3</attribute>
<attribute name="closeDelay">5000</attribute>
<attribute name="deleteOnExit">false</attribute>
</service>
</service>
</service>
what should i do for this?
Please guide me.

You should put it in the root of your classes (Ex: with JBuilder is
$projecthome/classes)
Alexp wrote:
Hi !
I have a problem with the logging configuration.
What is the right place for the log4j.properties file?
Thanks a lot for cooperation,
Alex.

Pi 7.1 ehp1 log-configuration.xml, howto create/edit in NWDS?

Hello,
In NWDS 2.0 You have a special mode in NWDS to edit the file. You get tabs with Log Formatter, Log Destination, Log Controller and Source.
How does it work in NWDS 7.1 EHP1?
The log-configuration shipped with the example module is packed inside the sample adapter module jar. This seems not right? It should be in the ear?
In nwds I create an ear, and then use the nwpacktool to repack it as an sda to be able to deploy with jspm. There is a firewall so I can't deploy from nwds.
I'm building an adapter module. It works fine besides that the logcontroller doesn't display in the nwa, and I can't set the log levels.
I've tried placing the log-configuration.xml both in the META-INF of the jar and the META-INF of the ear but it still doesn't work.
Thanks for your help.
Best regards
Otto Frost

Hello,
The NWDS 7.1 EHP1 doesn't recognize the file in the META-INF.
In 7.11 the log-configuration.xml isn't used anymore according to SAP.
When the module is started the tracing location is displayed in the log-configurator automagically.
My module wasn't started after deployment.
To start it I had to go into the NWA - Operation Management -
Systems - Start&Stop - Java EE applications - myPiModule
It was stopped, but started up when I clicked the "Logs" link.
After this it is visible in the tracing locations in the nwa log configurator.
Best regards
Otto Frost

Log-configuration.xml How to use it

I am trting to use the logging xcapabilities by usinmg log-configuration.xml but is unable to do so by simply configuring it. If I do using using coding i.e by adding in code location and filelog in code I am able to log. But instead of it I am more intrested to use log-configuration.xml. So please provide me with exact steps that need to be done for configuraing it rightly with category defined as well and using a fileLog as an example.

I am trting to use the logging xcapabilities by usinmg log-configuration.xml but is unable to do so by simply configuring it. If I do using using coding i.e by adding in code location and filelog in code I am able to log. But instead of it I am more intrested to use log-configuration.xml. So please provide me with exact steps that need to be done for configuraing it rightly with category defined as well and using a fileLog as an example.

Oblix_OBWebGate_AuthnAndAuthz: ..- Unable to read log configuration file.

Hi All,
I have a painful problem with Oracle 10g Webgate. I am using Oracle_Access_Manager10_1_4_3_0_linux64_APACHE22_WebGate to procted Apache resource. I have some problem in Custom Authentication plugin. which is not still resolve(https://forums.oracle.com/thread/2549716).
Now I have apply patch BP9 (Oracle_Access_Manager10_1_4_3_0_BP09_Patch_linux64_APACHE22_WebGate) for Webgate, Now I have a new issue, I am unable to get the logon page of OAM when I try to access my Apache resource.
The Error Message in the browser is:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, root@localhost and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Apache/2.2.3 (Oracle) Server at apache.tigerit.com Port 80
In the error log file of Apache I have found
[Sun Jun 23 11:53:17 2013] [error] [client 192.168.1.156] Oblix_OBWebGate_AuthnAndAuthz: Error: /opt/netpoint/webgate/access/oblix/config/oblog_config_wg.xml - Unable to read log configuration file.
[Sun Jun 23 11:53:17 2013] [error] [client 192.168.1.156] Oblix_OBWebGate_AuthnAndAuthz: Error: /opt/netpoint/webgate/access/oblix/config/oblog_config_wg.xml - Unable to read log configuration file.
[Sun Jun 23 11:53:20 2013] [error] [client 192.168.1.156] Oblix_OBWebGate_AuthnAndAuthz: Error: /opt/netpoint/webgate/access/oblix/config/oblog_config_wg.xml - Unable to read log configuration file.
[Sun Jun 23 11:53:35 2013] [error] [client 192.168.1.156] Oblix_OBWebGate_AuthnAndAuthz: Error: /opt/netpoint/webgate/access/oblix/config/oblog_config_wg.xml - Unable to read log configuration file.
[Sun Jun 23 11:53:35 2013] [error] [client 192.168.1.156] Oblix_OBWebGate_AuthnAndAuthz: Error: /opt/netpoint/webgate/access/oblix/config/oblog_config_wg.xml - Unable to read log configuration file.
[Sun Jun 23 11:53:35 2013] [error] [client 192.168.1.156] Oblix_OBWebGate_AuthnAndAuthz: Error: /opt/netpoint/webgate/access/oblix/config/oblog_config_wg.xml - Unable to read log configuration file.
Can Anyone help me regarding this issue...
Thanks
Tamim Khan

Hi Colin,
Thanks for your help, You are right I have change the permission of /opt/netpoint/webgate/access/oblix/lib/libxmlengine.so.
Now I am able to access the logon page of the access manager.
But the problem as I mention in (https://forums.oracle.com/thread/2549716) my ObSSOCookie value is still loggedcontinue.
My Authentication return (ExecutionStatus.SUCCESS) Successful from the Java Code , and I am unable to login in the application. The thing is I can't manipulate ObSSOCookie from Java code.
I have apply Patch 12363955 to resolve this issue. But this patch is now to resolve this issue.
Have you any idea how to resolve this issue.
Thanks
Tamim Khan

Log configuration changes to syslog on Nexus 7000?

I need to be able to log any configuration changes to syslog on our Nexus switches. On IOS this is easy with the archive commands, but I'm a little stuck trying to do this on our Nexus gear. On the IOS gear I run the commands:
archive
log config
logging enable
logging size 100
hidekeys
notify syslog
How do I do the equivalent on NX-OS?

Cisco NX-OS can log configuration change events along with the individual changes when AAA command accounting is enabled.
With command accounting enabled, all CLI commands entered, including configuration commands, are logged to the configured AAA server. Using this information, a forensic trail for configuration change events along with the individual commands entered for those changes can be recorded and reviewed.
Because of this capability, it is strongly advised that AAA command accounting be enabled and configured.
Refer to the “TACACS+ Command Accounting” section of this document for more information.
The Nexus 7000, by default keeps a local accounting log of all the configuration commands entered on the device; you can view this with the 'show accounting log' command.
In NX-OS, we changed the way logging works. We keep a local accounting log of all the
configuration changes ("show accounting log"), but if you want to send those logs to a
server, it must be done with through a TACACS server. Please see the below documentation:
Configuring AAA on Nexus
TACACS command accounting
-Thanks
Vinod
**Encourage Contributors. RATE Them.**

Deployment of Logging configuration

Hi,
I have a problem, when I deploy an EAR-DC with a log-configuration.xml.
I cant see in the Visual Administrator (under Cluster->J2E->Server 0
0_..->Services->Deploy) the log configuration deployment. There was no
error/warning after the deployment in the console.
I have another EAR-DC and there I configured this xml-File similar and everything works fine.
Regards,
Trian

I'm not sure whether you have the same problem as I have:
I deployed EAR from NWDS and log configuration didn't change even if I had created log-configuration.xml. Then I found this file in root of EAR instead of inside META-INF folder. I made manual modificaton to that and manually deployed. And configuration worked. Still I want to have correct deployment automatically from NWDS.

ACS 5.4, logging configuration.

Similar Messages

Maybe you are looking for