Sun Role Manager (SRM)

To find out that the version of SRM, login as an Admin user and the version of SRM will
show at the bottom of any screen. If the SRM is down and the admin cannot login then you
can check out a file called VERSION.txt located at

/<absolute path of SRM directory>/WEB-INF/classes/VERSION.txt

Log4j.propertis and relevant Role Manager logs (rbacx.log) during the above time frame, the
location of the "rbacx.log" are noted within "log4j.properties" file within the "WEB-INF"
directory.

Set CLASSPATH environment variable as described below and relaunch the installer For the Windows environment
(assuming connectivity is to be established with MS SQL Server, the JDBC driver is located in C:\RBACx_Drivers and
Role Manager Installer is located in C:\SRM_4.0)

set CLASSPATH=.;C:\RBACx_Drivers\jtds-1.2.jar
cd C:\SRM_4.1
install.bat

For the UNIX environment
(assuming connectivity is to be established with DB2 Server, the JDBC driver is located in usr/local/RBACx_Drivers/ and
the Role Manager installer is located in usr/local/SRM_4.1/)

export CLASSPATH=.:/usr/local/RBACx_Drivers/db2jcc.jar:/usr/local/RBACx_Drivers/ db2jcc_license_cu.jar
cd /usr/local/SRM_4.1
install.sh

Note - No line breaks should exist during CLASSPATH setup

- Check jdbc.properties configuration file in $RBACX_HOME/conf folder
- Check conf-context.xml file in /WEB-INF/ folder
- Ensure that JDBC drivers corresponding to the database type is present in /WEB-INF/lib
- Verify the database server connectivity can be established from the application server

- Verify if $RBACX_HOME variable in 'workflows.xml' in /WEB-INF/classes is correctly setup

- Copy weka.jar into /WEB-INF/lib folder, and restart the application server

- To setup IBM Tivoli Identity Manager, uncomment the following lines from 'iam-context.xml'

<!--entry key="ibm">
<ref local="tim"/>
</entry-->
<!--bean id="tim" class="com.vaau.rbacx.iam.ibm.TIMIAMSolution" parent="abstractIAMSolution"/-->

- To setup CA eTrust Identity Access Management, uncomment the following lines in 'iam-context.xml'

<!--entry key="ca">
<ref local="eTrust"/>
</entry-->
<!--bean id="eTrust" class="com.vaau.rbacx.iam.ca.ETrustIAMSolution"
parent="abstractIAMSolution">
<property name="extensions">
<value>${com.ca.iam.extensions}</value>
</property>
<property name="userSearchFilter">
<value>*</value>
</property>
</bean-->

- To setup Oracle Identity Manager, uncomment the following lines listed in 'iam-context.xml'

<!--entry key="oracle">
<ref local="oim"/>
</entry-->
<!--bean id="oim" class="com.vaau.rbacx.iam.oracle.OIMIAMSolution" parent="abstractIAMSolution">
// Sample application to namespace mapping
<property name = "namespaceMap">
<map>
<entry key = "HealthMaster">
<value>RACF Account</value>
</entry>
<entry key = "HealthMaster1">
<value>RACF Account</value>
</entry>
</map>
</property>
//Sample namespace attribute mapping->
<property name = "nsAttributeMap">
<map>
<entry key = "HealthMaster">
<map>
<entry key = "transactions">
<value>UD_RACFTR_P_TRANSACTION</value>
</entry>
</map>
</entry>
<entry key = "HealthMaster1">
<map>
<entry key = "transactions">
<value>UD_RACFTR_P_TRANSACTION</value>
</entry>
</map>
</entry>
</map>
</property>
<property name="loginConfig">
<value>${com.vaau.rbacx.iam.oracle.loginConfig}</value>
</property>
<property name="oimHome">
<value>${com.vaau.rbacx.iam.oracle.oimHome}</value>
</property>
<property name = "provider">
<value>jnp://</value>
</property>
<property name = "namingContextFactory">
<value>org.jnp.interfaces.NamingContextFactory</value>
</property>
<property name = 'roleDao'>
<ref bean="roleDao"/>
</property>
<property name = "policyManager">
<ref bean = "policyManager"/>
</property>
<property name="userProperties">
<map>
<entry key = "userName">
<value>Users.User ID</value>
</entry>
<entry key = "firstName">
<value>Users.First Name</value>
</entry>
<entry key = "lastName">
<value>Users.Last Name</value>
</entry>
<entry key = "middleName">
<value>Users.Middle Name</value>
</entry>
<entry key = "manager">
<value>Users.Manager Login</value>
</entry>
<entry key = "primaryEmail">
<value>Users.Email</value>
</entry>
<entry key = "employeeType">
<value>Users.Role</value>
</entry>
<entry key = "startDate">
<value>Users.Start Date</value>
</entry>
<entry key = "endDate">
<value>Users.End Date</value>
</entry>
<entry key = "createDate">
<value>Users.Provisioned Date</value>
</entry>
</map>
</property>
<property name = "customProperties">
<list>
<value>Users.Email</value>
<value>Organizations.Organization Name</value>
<value>USR_UDF_LOCATION</value>
<value>Users.Deprovisioning Date</value>
<value>Users.Xellerate Type</value>
<value>Users.Identity</value>
<value>Users.Lock User</value>
<value>Users.Disable User</value>
<value>Users.Role</value>
</list>
</property>
</bean-->

- Validate the file path listed in 'reporting-context.xml'
- Verify the report being rendered(<$FILE_NAME>.jasper) exists in 'reports' folder

- Verify the $RBACX_HOME path outlined in 'conf-context.xml' and 'reporting-context.xml' is accurate

- Increasing the size of JVM memory pool and clearing out Java cache solves the exception stated above.
The recommended setting for min. / max. value is 512 MB / 1024 MB respectively

log4j.rootLogger=INFO, file

# Console Appender
log4j.appender.console=org.apache.log4j.ConsoleAppender
log4j.appender.console.layout=org.apache.log4j.PatternLayout
log4j.appender.console.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c{1}] %m%n

# File Appender
log4j.appender.file=org.apache.log4j.DailyRollingFileAppender
log4j.appender.file.file=logs/rbacx.log
log4j.appender.file.layout=org.apache.log4j.PatternLayout
log4j.appender.file.layout.ConversionPattern=%d{ABSOLUTE} %-5p [%c{1}] %m%n
log4j.appender.file.ImmediateFlush=true
log4j.appender.file.DatePattern='.'yyyy-MM-dd

#Tomcat logging
log4j.logger.org.apache.catalina=WARN
 DON'T EDIT FOLLOWING
log4j.logger.com.vaau.commons.springframework.context.ContextLifecycleListener=INFO

#VAAU commons logging
log4j.logger.com.vaau.commons=WARN

#RBACx Core logging
log4j.logger.com.vaau.rbacx= WARN
log4j.logger.com.vaau.rbacx.core= WARN
log4j.logger.com.vaau.rbacx.service= WARN
log4j.logger.com.vaau.rbacx.manager= WARN

#RBACx Security logging
log4j.logger.com.vaau.rbacx.security=WARN

#RBACx Scheduling logging
log4j.logger.com.vaau.rbacx.scheduling=DEBUG

#RBACx ETL
log4j.logger.com.vaau.rbacx.etl.manager=WARN

#RBACx IAM logging
log4j.logger.com.vaau.rbacx.iam= DEBUG

#RBACx Reporting logging
log4j.logger.com.vaau.rbacx.reporting=WARN

#RBACx Audit logging
log4j.logger.com.vaau.rbacx.audit=WARN

#RBACx Role-Mining logging
log4j.logger.com.vaau.rbacx.rolemining=WARN
log4j.logger.com.vaau.commons.datamining=WARN
log4j.logger.com.vaau.commons.ml=WARN
log4j.logger.com.vaau.odm=WARN

#RBACx IDC logging
log4j.logger.com.vaau.rbacx.idc=WARN

#SYTEM
log4j.logger.com.vaau.rbacx.system=DEBUG

#Sandbox
log4j.logger.com.vaau.rbacx.sandbox.ida=WARN
log4j.logger.com.vaau.rbacx.sandbox.rme=WARN

#Workflow
log4j.logger.com.vaau.rbacx.workflow=WARN
log4j.logger.com.opensymphony.workflow.AbstractWorkflow=ERROR

#SqlMap logging configuration. Change WARN to DEBUG if want to see all sql statements
log4j.logger.com.ibatis=WARN
log4j.logger.com.ibatis.common.jdbc.SimpleDataSource=WARN
log4j.logger.com.ibatis.common.jdbc.ScriptRunner=WARN
log4j.logger.com.ibatis.sqlmap.engine.impl.SqlMapClientDelegate=WARN
log4j.logger.org.springframework.jdbc.datasource.DataSourceTransactionManager=WARN
log4j.logger.java.sql.Connection=WARN
log4j.logger.java.sql.Statement=WARN
log4j.logger.java.sql.PreparedStatement=WARN

#Spring Framework
log4j.logger.org.springframework=WARN
log4j.logger.org.springframework.rules.values=WARN
log4j.logger.org.springframework.context.support=WARN
log4j.logger.org.springframework.transaction=WARN
log4j.logger.org.springframework.aop.interceptor=WARN
log4j.logger.org.springframework.security=WARN
log4j.logger.org.springframework.security.event.authentication.LoggerListener=FATAL

#For Trace Logging change them TRACE
log4j.logger.org.springframework.aop.interceptor.PerformanceMonitorInterceptor=WARN
log4j.logger.org.springframework.aop.interceptor.CustomizableTraceInterceptor=WARN

##JIAM log
log4j.category.com.ca=WARN
#log4j.category.com.ca.commons.jndi=DEBUG

#Quartz scheduler
log4j.logger.org.quartz=WARN

#DWR
log4j.logger.uk.ltd.getahead.dwr=FATAL
log4j.logger.org.directwebremoting=FATAL

#ehcache
log4j.logger.net.sf.ehcache=ERROR

#CloverETL
log4j.logger.org.jetel=ERROR
#C3p0
log4j.logger.com.mchange=ERROR

#JasperReports
log4j.logger.net.sf.jasperreports=ERROR
log4j.logger.com.vaau.rbacx.search=WARN
log4j.logger.com.vaau.commons.search=WARN


A few more parameters to keep in mind are the Security and the IAM logging.