HP XP P9000 Audit Log User and Reference Guide

Table Of Contents
DescriptionItem
Indicates the number of seconds before the connection to the LDAP server times outTimeout
Indicates the retry interval in seconds when the connection to the LDAP server failsRetry Interval
Indicates the retry times when the connection to the LDAP server failsNumber of Retries
The number of external authentication servers that are setNum. of Servers
Example 4
07xx,YYYY/MM/DD,HH:MM:SS.xxx, 00:00,RMI AP,uid=user-name,1,
Task Name,[ACM],Setup Server,Kerberos,Normal end,
from=xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx,,Seq.=xxxxxxxxxx
+{DNS Lookup,Realm Name,Primary Host Name,Primary Port Number,
Clock Skew,Timeout,Secondary Server,Secondary Host Name,
Secondary Port Number}=
-{Disable,example1.com,example2.com,88,300,10,Enable,example3.com,
88}
++{External User Group Mapping,Certification File Name,
Authentication Protocol,Primary Port Number,Base DN,
Search User's DN,Timeout,Retry Interval,Number of Retries,
Secondary Sever,Secondary Port Number}=
-{Enable,CFFILE,STARTTLS,389,
-dc=example4 dc=com,example5.com,10,1,20,Enable,389}
+Num. of Servers=1
Basic Information for Example 4
DescriptionParameter
Indicates that the Kerberos server is used as the External Authentication server.Kerberos
Detailed Information for Example 4
DescriptionItem
Displays whether to search for the Kerberos server using the information registered in the
SRV records in the DNS server
DNS Lookup
Enable: Performs the search using information registered in the SRV records in the DNS
server
Disable: Performs the search using the host name and the port number
Indicates the default realm nameRealm Name
Indicates the host name of the Kerberos serverPrimary Host Name
Indicates the port number of the Kerberos serverPrimary Port Number
Indicates the acceptable range of time difference between the SVP and the Kerberos serverClock Skew
Indicates the number of seconds before connection to the Kerberos server times outTimeout
Indicates whether to use a secondary Kerberos serverSecondary Server
Enable: Use the secondary server
Disable: Do not use the secondary server
Indicates the host name of the secondary Kerberos serverSecondary Host Name
Indicates the port number of the secondary Kerberos serverSecondary Port Number
Indicates whether to connect an authentication server to an authorization serverExternal User Group
Mapping
Enable: Connects an authentication server to an authorization server
ACM descriptions 53