Previous Topic: Federation Manager UI Debug Logging

Next Topic: Server Log Rollover Settings

Federation Manager Server Trace and Debug Logging

To enable trace logging of server-side runtime activities, configure the smtracedefault.txt file. This file defines what is written to the smtracedefault.log file.

Use the XPSConfig tool to enable server-side runtime debugging.

To enable server-side tracing

  1. Open a command window.
  2. Enter XPSConfig.

    Type the command as it is shown here. The command is case-sensitive.

    The Products Menu displays.

  3. Enter SM.

    The Parameters Menu displays.

  4. Enter the number associated with the LogTraceConfig parameter.
  5. Enter c to change the value.
  6. For the new value, enter federation_mgr_home\siteminder\config\smtracedefault.txt

    This value points to the tracing configuration file.

  7. Enter q to return to the parameter list.
  8. If you are finished configuring parameters, keep entering q until you exit XPSConfig.

    Changes made in XPSConfig are not recognized until you exit the XPSConfig tool. Where noted, some changes require that you restart Federation Manager services.

  9. Navigate to federation_mgr_home\siteminder\config\smtracedefault.txt. The smtracedefault.txt file defines what Federation Manager logs in smtracedefault.log.
  10. Back up the smtracedefault.txt file.
  11. Open the smtracedefault.txt file in an editor. For the asserting party and relying party tracing configuration, edit the file by including the following contents.
    components: Server/Policy_Server_General, IsProtected/Resource_Protection,
    Login_Logout/Authentication, Login_Logout/Policy_Evaluation,
    Login_Logout/Active_Expression, Login_Logout/Session_Management,
    IsAuthorized/Policy_Evaluation, JavaAPI, 
    Fed_Server/Assertion_Generator, Fed_Server/Auth_Scheme,
    Fed_Server/Configuration 
    data: Date, Time, Tid, TransactionID, SrcFile, Function, Domain,
    Resource, Action, User, SessionID, Data, AuthReason, Message
    

    Note: In the directory federation_mgr_home\siteminder\config\profiler_templates, there are samples of other configuration settings you can use.

To turn off tracing, specify a space for the LogTraceConfig value by entering " ". An empty string does not work.