Enabling LDAP verbose logging in InterScan Web Security Virtual Appliance (IWSVA)

- Updated:
- 14 Feb 2017
- Product/Version:
- InterScan Web Security Virtual Appliance 5.6
- InterScan Web Security Virtual Appliance 6.0
- InterScan Web Security Virtual Appliance 6.5
- Platform:
- N/A N/A

Summary

Enable verbose logging in IWSVA to get the necessary information used for analysis by Trend Micro Technical Support.

Details

The Authentication daemon (AuthDaemon) performs LDAP user identification functions for the Scanning daemon and Application Control daemon. It performs LDAP group membership queries and calls the WMI daemon to perform transparent user identification.

To enable AuthDaemon verbose logging:

Connect to the IWSVA server via SSH.
Log in as "root".
Edit the /etc/iscan/commonldap/LdapSetting.ini file.
Search for the following parameter and set verbose to "yes".
# set auth daemon to debug mode
verbose=yes
Restart the authentication service using the following command:
# /etc/iscan/S99ISAuthDaemon restart
Start a packet capture in the web console. Go to Administration > Support > Network Packet Capturing.
Reproduce the issue.
Stop the packet capture in Step 6.
Revert the setting in Step 4 by changing the verbose value to "no".

Using the above procedure, you can get system information file and network packet capture in IWSVA.

Rating:

Category:

Troubleshoot

Solution Id:

1105558

Feedback

Did this article help you?

Thank you for your feedback!

What was the problem with this article?

The image(s) in the article did not display properly.

The article did not provide detailed procedure.

The article is hard to understand and follow.

The video did not play properly.

The article did not resolve my issue.

Others. Please specify.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

Thanks for voting.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.