Novell XDASV2 - ADMINISTRATION GUIDE V1 Bedienungsanleitung

Novell®

www.novell.com

novdocx (en) 16 April 2010

AUTHORIZED DOCUMENTATION

Novell XDASv2 Administration Guide

XDASv2 for eDirectory, IDM, and NMAS

October 15, 2010

Administration Guide

novdocx (en) 16 April 2010

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 16 April 2010

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4Novell XDASv2 Administration Guide

novdocx (en) 16 April 2010

Contents 5

Contents

novdocx (en) 16 April 2010

About This Guide 7

1Overview 9

1.1 Key Benefits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.2 XDASv2 Server Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

2 Configuring XDASv2 11

2.1 Installing eDirectory XDASv2 Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.2 Configuring XDASv2 Property File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.3 Configuring XDAS Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

2.4 Loading the Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

3 iManager Plug-In for XDASv2 13

3.1 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

3.2 Installing iManager Plug-In for XDASv2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

3.3 Using iManager Plug-In Console for XDASv2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

3.4 Configuring XDASv2 Events for Auditing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

3.4.1 Configuring Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

3.4.2 Configuring XDASv2 Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

3.4.3 Configuring XDASv2 Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

3.5 Securing the iManager Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

4 Troubleshooting 19

A XDASv2 Events 21

A.1 Account Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

A.2 Session Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

A.3 Data Item and Resource Element Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

A.4 Service or Application Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

A.5 Service or Application Utilization Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

A.6 Peer Association Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

A.7 Data Item or Resource Element Content Access Events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

A.8 Work Flow Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

A.9 Role Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

A.10 Exceptional Events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

A.11 Audit Service Management Events . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

A.12 Authentication Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

B XDASv2 Schema 33

B.1 XDAS V2 JSON Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

B.2 XDAS Field Definitions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

B.3 Outcome Codes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

B.4 Example of an Event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

6Novell XDASv2 Administration Guide

novdocx (en) 16 April 2010

About This Guide 7

novdocx (en) 16 April 2010

About This Guide

This guide describes how to configure and use XDASv2 to audit Novell eDirectory 8.8 and Novell

Identity Manager.

Chapter 1, “Overview,” on page 9

Chapter 2, “Configuring XDASv2,” on page 11

Chapter 3, “iManager Plug-In for XDASv2,” on page 13

Chapter 4, “Troubleshooting,” on page 19

Chapter A, “XDASv2 Events,” on page 21

Appendix B, “XDASv2 Schema,” on page 33

Audience

This guide is intended for Administrators.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation

included with this product. Please use the User Comments feature at the bottom of each page of the

online documentation, or go to www.novell.com/documentation/feedback.html and enter your

comments there.

Documentation Updates

For the most recent version of the XDASv2 Administration Guide, visit the eDirectory Web site

(http://www.novell.com/documentation/edir88).

Additional Documentation

For documentation on eDirectory documentation, see the following:

Novell eDirectory 8.8 Administration Guide (http://www.novell.com/documentation/edir88/

index.html).

Novell eDirectory 8.8 Installation Guide (http://www.novell.com/documentation/edir88/

index.html).

Novell iManager 2.7 Administration Guide (http://www.novell.com/documentation/

imanager27/index.html).

8Novell XDASv2 Administration Guide

novdocx (en) 16 April 2010

Overview

novdocx (en) 16 April 2010

Overview

The XDASv2 specification provides a standardized classification for audit events. It defines a set of

generic events at a global distributed system level. XDASv2 provides a common portable audit

record format to facilitate the merging and analysis of audit information from multiple components

at the distributed system level. The XDASv2 events are encapsulated within a hierarchical

notational system that helps to extend the standard or existing event identifier set.The XDASv2

taxonomy defines a set of fields, of these the primary fields are observer, initiator and target.

XDASv2 events helps you easily understand the audit trails of heterogeneous applications

Section 1.1, “Key Benefits,” on page 9

Section 1.2, “XDASv2 Server Architecture,” on page 9

1.1 Key Benefits

Provides secured audit services for a distributed system.

Defines a set of generic events at a global distributed system level.

Defines a common portable audit record format to help merge and analyse the audit

information from multiple components of a distributed system.

Defines a common format for audit events that analysis applications can use.

Records XDASv2 audit trail.

Configures event preselection criteria and event disposition actions.

Provides a common audit format regardless of the platform on which the XDASv2 service is

running.

Supports heterogeneous environments without the necessity to reengineer the current operating

system or application-specific audit service implementations.

Supports adequate separation of duties for users.

Protects the audit log by making it accessible only to principals acting in specific

administrative or security roles.

1.2 XDASv2 Server Architecture

10 Novell XDASv2 Administration Guide

novdocx (en) 16 April 2010

Figure 1-1 XDASv2 Server Architecture

Inhaltsverzeichnis

Andere Novell Software Handbücher

Novell

Novell LINUX ENTERPRISE DESKTOP 10 - KDE 21-06-2006 Bedienungsanleitung

Novell

Novell GROUPWISE 7 WEBACCESS Bedienungsanleitung

Novell

Novell SUPPORT ADVISOR - 04-2010 Bedienungsanleitung

Novell

Novell GROUPWISE 7 - POST OFFICE AGENT Bedienungsanleitung

Novell

Novell IFOLDER 3.8 - CROSS-PLATFORM Bedienungsanleitung

Novell

Novell IDENTITY ASSURANCE SOLUTION 3.0.2 -... Bedienungsanleitung

Novell

Novell CLIENT FOR LINUX 2.0 Bedienungsanleitung

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 - DEPLOYMENT GUIDE... Kurzanleitung

Novell

Novell EDIRECTORY 8.8 SP2 Bedienungsanleitung

Novell

Novell GROUPWISE 8 - MONITOR Bedienungsanleitung

Novell

Novell PLATESPIN PORTABILITY SUITE 8.1 Bedienungsanleitung

Novell

Novell APPARMOR - AND Datenblatt

Novell

Novell SUPPORT ADVISOR 2.0.1 Bedienungsanleitung

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.2 -... Bedienungsanleitung

Novell

Novell PLATESPIN ORCHESTRATE 2.0.2 - ADMINISTRATOR REFERENCE... Service-Handbuch

Novell

Novell EVOLUTION 2.6 Bedienungsanleitung

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Bedienungsanleitung

Novell

Novell SERVER CONSOLIDATION MIGRATION TOOLKIT 1.2 - ADMINISTRATION GUIDE... Bedienungsanleitung

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION 8.0.2 - INTEGRATION AND STREAMING GUIDE... Bedienungsanleitung

Novell

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 Bedienungsanleitung

Novell

Novell ZENWORKS 10 ASSET MANAGEMENT SP3 - MIGRATION GUIDE 10.3... Bedienungsanleitung

Novell

Novell LINUX ENTERPRISE SERVER 10 - ARCHITECTURE-SPECIFIC INFORMATION... Handbuch

Novell

Novell GROUPWISE 8 - RESOURCES Bedienungsanleitung

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Kurzanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Lexmark

Lexmark Apps Service-Handbuch