Configuration Guide › Identity Manager Logs › How to Trace Components and Data Fields

How to Trace Components and Data Fields

When CA Identity Manager integrates with SiteMinder, you can use the SiteMinder Policy Server Profiler to trace components and data fields in the Identity Manager extensions for the Policy Server. The Profiler lets you configure filters for the tracing output so that only specific values for a component or data field are captured.

Note: For instructions on using the Policy Server Profiler, see the CA SiteMinder Web Access Manager Policy Server Administration Guide.

You can enable tracing for the following components:

• Function_Begin_End

  Provides low-level trace statements when certain methods in the Identity Manager extensions for the Policy Server are executed.

• IM_Error

  Traces runtime errors in the Identity Manager extensions for the SiteMinder Policy Server.

• IM_Info

  Provides general tracing information for the Identity Manager extensions.

• IM_Internal

  Traces general information about internal Identity Manager operations.

• IM_MetaData

  Provides tracing information when Identity Manager processes directory metadata.

• IM_RDB_Sql

  Provides tracing information for relational databases.

• IM_LDAP_Provider

  Provides tracing information for LDAP directories.

• IM_RuleParser

  Tracks the process of parsing and evaluating member, owner, and admin policies, which are defined in an XML file that gets interpreted at runtime.

• IM_RuleEvaluation

  Traces the evaluation of member, admin, owner, and scope rules.

• IM_MemberPolicy

  Traces the evaluation of member policies, including membership and scope.

• IM_AdminPolicy

  Traces the evaluation of admin policies.

• IM_OwnerPolicy

  Traces the evaluation of owner policies.

• IM_RoleMembership

  Traces information relating to role membership, such as the list of roles a user has and the list of members in a certain role.

• IM_RoleAdmins

  Traces information relating to role administration, such as the list of roles a user can administer and the list of administrators for a certain role.

• IM_RoleOwners

  Traces information relating to role ownership, such as the list of roles a user owns and the list of owners for a certain role.

• IM_PolicyServerRules

  Traces evaluatation of member rules, such as RoleMember, RoleAdmin, RoleOwner rules, which are resolved by the Policy Server, and scope rules, such as All and AccessTaskFilter rules for AccessTasks

• IM_LLSDK_Command

  Traces communication between the internal Identity Manager SDK and the policy server. This trace component is used by Technical Support.

• IM_LLSDK_Message

  Traces messages that are explicitly sent by Java code to the Policy Server from the internal Identity Manager SDK. This trace component is used by Technical Support.

• IM_IdentityPolicy

  Traces the evaluation and application of Identity Policies.

• IM_PasswordPolicy

  Traces the evaluation of password policies.

• IM_Version

  Provides information about the Identity Manager version.

• IM_CertificationPolicy

  Traces the evaluation of certification policies.

• IM_InMemoryEval

  Traces the processing of Identity Manager policies, including member, admin, owner, and Identity Policies. This trace component is used by Technical Support.

• IM_InMemoryEvalDetail

  Provides additional detail about the processing of Identity Manager policies, including member, admin, owner, and Identity Policies. This trace component is used by Technical Support.

The data fields for which you can configure tracing are listed in the CA SiteMinder Web Access Manager Policy Server Administration Guide.