Troubleshooting The Identity Server And Authentication; Useful Networking Tools For The Linux Identity Server; Troubleshooting 100101043 And 100101044 Liberty Metadata Load Errors - Novell ACCESS MANAGER 3.1 SP1 - IDENTITY SERVER Manual

Troubleshooting the Identity
1 2
Server and Authentication
This section discusses the following topics:
Section 12.1, "Useful Networking Tools for the Linux Identity Server," on page 275
Section 12.2, "Troubleshooting 100101043 and 100101044 Liberty Metadata Load Errors," on
page 275
Section 12.3, "Authentication Issues," on page 283
Section 12.4, "Translating the Identity Server Configuration Port," on page 286
Section 12.5, "Problems Reading Keystores after Identity Server Re-installation," on page 291
Identity Server logging information can be found in
Logging," on page 250 and
12.1 Useful Networking Tools for the Linux
Identity Server
You can use the following tools (Linux and open source) to troubleshoot network problems:
netstat: Displays information related to open ports on your server. Lets you view listeners and
various IP addresses, such as the TCP output state.
iptables: Allows you to change the default ports (8080 and 8443) to the standard ports (80 and
443) for HTTP traffic. See
on page 286.
netcat: A networking utility that reads and writes data across network connections, using the
TCP/IP protocol. Netcat is useful for checking connectivity with the user store.
ldapsearch: An LDAP search tool useful for the Administration Console and Identity Server.
For example, you can generate an LDAP search/bind matching what the Identity Server sends,
to confirm whether an issue is with the Identity Server JAR files.
tcpdump: A command line tool for monitoring network traffic. Captures and displays packet
headers and matches them against a set of criteria.
LDAP Browser/Editor: Lets you export configuration information to a file, and to confirm
that Access Manager objects and attribute values are valid in an AccessManagerContainer. A
number of open source versions are available from the Internet.
12.2 Troubleshooting 100101043 and 100101044
Liberty Metadata Load Errors
The Identity Server is the identity provider for the other Access Manager components. The Access
Gateways, ESP-Enabled SSL VPNs and J2EE Agents have Embedded Service Providers. When an
Access Gateway or an agent is imported into the Administration Console and an Identity Server
configuration is selected for them, a trusted relationship is established with the Identity Server by
Section 11.3, "Configuring Component
Section 11.4, "Configuring Session-Based Logging," on page
Section 12.4, "Translating the Identity Server Configuration Port,"

Troubleshooting the Identity Server and Authentication

12
253.
275