HP Management Integration Framework Administrator Guide (T5494-96539, October 2012)

LDAP security domain mapping
LDAP security domains can be mapped to Management Integration Framework roles. See Adding
LDAP security domains to a machine.
Log and audit files
Log file. On a Management Integration Framework server which is running Windows, the
Management Integration Framework log file is located in the folder C:\Program
Files\Hewlett-Packard\XFROOT\log. The file naming format is xf-YYMMDD-number.log,
for example: xf-090824-1.log.
You can control the logging level by using the Management Integration Framework configuration
interface. See logging level.
Example – Log file content
Aug/24/2009 14:46:18.999998, XF, 4984, 3288, 1, main, 57, XFROOT = c:\xf
Aug/24/2009 14:46:19.250934, RestartThread, 4984, 5176, 1,
XfRestartThread, 23...
Aug/24/2009 14:46:19.272154, XF, 4984, 5052, 1, XfService, 82, Version
1.0 [Bu...
Aug/24/2009 14:46:19.513826, WebServiceEndpoint[class
xfd::RegistryService], 4...
Aug/24/2009 14:46:19.578464, WebServiceEndpoint[class
xfd::RegistryService], 4...
Aug/24/2009 14:46:19.605425, WebServiceEndpoint[class
xfd::RegistryService], 4...
Aug/24/2009 14:46:19.606039, WebServiceEndpoint[class
xfd::RegistryService], 4...
Aug/24/2009 14:46:19.626497, Xfd, 4984, 5052, 1, discoverycomponent,
44, Start...
Audit file. On a Management Integration Framework server which is running Windows, the
Management Integration Framework audit file is located in the folder C:\Program
Files\Hewlett-Packard\XFROOT\log. The file naming format is
xfaudit-YYMMDD-number.log, for example: xfaudit-090824-1.log
Example – Audit file content
Aug/24/2009 14:46:19.738423, SYSTEM, Security component starting
Aug/24/2009 14:46:20.365803, SYSTEM, XF domain name is PETS_MG, local
domain...
Aug/24/2009 14:46:22.449833, SYSTEM, Host 'PETS' initiated an
authorization co...
Aug/24/2009 14:46:26.033940, SYSTEM, Host 'PETS' initiated an
authorization co...
Aug/24/2009 14:47:53.419685, xftest, Login attempt from client address
99.999...
Aug/24/2009 14:47:53.439929, xftest, Login failed
Aug/24/2009 14:47:53.440490, xftest, Login failed
Aug/24/2009 14:48:01.250345, xftest, Login attempt from client address
99.999....
Aug/24/2009 14:48:01.629247, xftest, Login success
Login user names and passwords
• Qualified user names. When logging in to a Management Integration Framework interface,
HP recommends that you enter a qualified user name. That is, enter a name that includes a
valid OS security domain, for example user@domain, domain\user and user.
If you enter an unqualified user name (one with no explicit domain), Management Integration
Framework will silently append the local machine name. Because of the distributed nature of
the Management Integration Framework environment, this could lead to authentication issues.
• Leading and trailing spaces. Leading and trailing spaces are trimmed from user names and
passwords that are entered in login screens. This can prevent login.
LDAP security domain mapping 43