000018017 - Certain settings such as cleartrust.agent.log_file under <Virtualhost> blocks in webagent.conf do not work

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000018017
Applies ToSome settings can only be applied in webagent.conf globally and not in VirtualHost blocks
RSA ClearTrust 4.6 Agent
RSA ClearTrust 4.7 Agent
IssueCertain settings such as cache and log when applied to <VirtualHost> in webagent.conf do not work
Create a simple VirtualHost after setting up a virtual web site in webagent.conf and restart webserver:

<VirtualHost address=* name=myvirtualhost.myvirtualdomain.com>
cleartrust.agent.web_server_name=myvirtualhostname
cleartrust.agent.log_file=/var/log/myvirtualhostCT.log
</Virtualhost>

No logging occurs and no separate log gets written to in /var/log for the virtual host, only the global log ct_agent.log
CauseCertain parameters can only be set at the global level in webagent.conf.  This behavior is correct as certain settings cannot be overridden in a VirtualHost directive block.  This is true for both 4.6 and 4.7 agents.
ResolutionThe restricted settings of "global only" that cannot be overridden in a <VirtualHost> block are:

1. All logging parameters, cleartrust.agent.log*
2. All cache related parameters:
    cleartrust.agent.protected_resource_cache_ttl
    cleartrust.agent.protected_resource_cache_size
    cleartrust.agent.unprotected_resource_cache_ttl
    cleartrust.agent.unprotected_resource_cache_size
    cleartrust.agent.authz_allow_cache_ttl
    cleartrust.agent.authz_allow_cache_size
    cleartrust.agent.authz_deny_cache_ttl
    cleartrust.agent.authz_deny_cache_size
    cleartrust.agent.token_cache_ttl
    cleartrust.agent.token_cache_size
    cleartrust.agent.iis.user_security_handle_cache_size
    cleartrust.agent.iis.user_security_handle_cache_ttl
    cleartrust.agent.user_properties_cache_ttl
    cleartrust.agent.user_properties_cache_size

 3. cleartrust.agent.ct_print_log_level
 4. cleartrust.agent.iis.priority
 5. cleartrust.agent.shared_pool.enable
 6. cleartrust.agent.debug_modules
Legacy Article IDa34308

Attachments

    Outcomes