CA Identity Manager Configuration Guide › CA Identity Manager Logs › How to Trace Components and Data Fields

How to Trace Components and Data Fields

When CA Identity Manager integrates with CA SiteMinder®, you can use the CA SiteMinder® Policy Server Profiler to trace components and data fields in the CA Identity Manager extensions for the Policy Server. The Profiler lets you configure filters for the tracing output so that only specific values for a component or data field are captured.

Note: For instructions on using the Policy Server Profiler, see the CA CA SiteMinder® Web Access Manager Policy Server Administration Guide.

You can enable tracing for the following components:

Function_Begin_End

Provides low-level trace statements when certain methods in the CA Identity Manager extensions for the Policy Server are executed.

IM_Error

Traces runtime errors in the CA Identity Manager extensions for the CA SiteMinder® Policy Server.

IM_Info

Provides general tracing information for the CA Identity Manager extensions.

IM_Internal

Traces general information about internal CA Identity Manager operations.

IM_MetaData

Provides tracing information when CA Identity Manager processes the directory metadata.

IM_RDB_Sql

Provides tracing information for relational databases.

IM_LDAP_Provider

Provides tracing information for LDAP directories.

IM_RuleParser

Tracks the process of parsing and evaluating member, owner, and admin policies, which are defined in an XML file that gets interpreted at runtime.

IM_RuleEvaluation

Traces the evaluation of member, admin, owner, and scope rules.

IM_MemberPolicy

Traces the evaluation of member policies, including membership and scope.

IM_AdminPolicy

Traces the evaluation of admin policies.

IM_OwnerPolicy

Traces the evaluation of owner policies.

IM_RoleMembership

Traces information relating to role membership, such as the list of roles a user has and the list of members in a certain role.

IM_RoleAdmins

Traces information relating to role administration, such as the list of roles a user can administer and the list of administrators for a certain role.

IM_RoleOwners

Traces information relating to role ownership, such as the list of roles a user owns and the list of owners for a certain role.

IM_PolicyServerRules

Traces evaluation of member rules, such as RoleMember, RoleAdmin, RoleOwner that Policy Server has resolved, and scope rules, such as All and AccessTaskFilter rules for AccessTasks

IM_LLSDK_Command

Traces communication between the internal CA Identity Manager SDK and the policy server. Technical Support uses this trace component.

IM_LLSDK_Message

Traces messages are explicitly sent by Java code to the Policy Server from the internal CA Identity Manager SDK. Technical Support uses this trace component.

IM_IdentityPolicy

Traces the evaluation and application of Identity Policies.

IM_PasswordPolicy

Traces the evaluation of password policies.

IM_Version

Provides information about the CA Identity Manager version.

IM_CertificationPolicy

Traces the evaluation of certification policies.

IM_InMemoryEval

Traces the processing of CA Identity Manager policies, including member, admin, owner, and Identity Policies. Technical Support uses this trace component.

IM_InMemoryEvalDetail

Provides additional detail about the processing of CA Identity Manager policies, including member, admin, owner, and Identity Policies. Technical Support uses this trace component.

The data fields for which you can configure tracing are listed in the CA CA SiteMinder® Web Access Manager Policy Server Administration Guide.