Enabling debug for troubleshooting an RSA Authentication Manager 8.x web tier deployment

[#1]

Article Number

000017402

Applies To

RSA Product Set:  SecurID
RSA Product/Service Type:  Authentication Manager Web Tier
RSA Version/Condition:  8.0, 8.1, 8.2

Issue

This article provides information on enabling debug in an RSA Authentication Manager Web Tier deployment.

Resolution

Where there is a requirement to troubleshoot the RSA Web Tier, debug can be enabled in the configuration of the deployed RSA Web Tier.
 
NOTE: The Web Tier services will require a stop and start as a change is being made to a configuration file.

1. Logon to the server where the RSA Web Tier software was installed as an administrative user.
2. Navigate to the <WT_Home>/server/config directory, where <WT_Home> is the path and directory name used to installed the RSA Web Tier software. The default path for Unix is /opt/RSASecurity/RSAAuthenticationManagerWebtier and C:\Program Files\RSA Security\RSA Authentication Manager Webtier for Windows.
3. Make a copy of the config.xml file.  This is a precaution, as changes are going to be made to this file. 

Unix

cp config.xml config.xml-SAV

Windows

copy config.xml config.xml-SAV

4. ​Open the config.xml file with an editor and locate this section.. 

<log>
  <name>AdminServer</name>      
  <file-name>../../logs/AdminServer.log</file-name>     
  <rotation-type>bySize</rotation-type>     
  <file-min-size>5120</file-min-size>     
  <log-file-severity>Info</log-file-severity>     
  <stdout-severity>Notice</stdout-severity>     
 <domain-log-broadcast-severity>Notice</domain-log-broadcast-severity>     
  <memory-buffer-severity>Notice</memory-buffer-severity>     
  <redirect-stdout-to-server-log-enabled>true</redirect-stdout-to-server-log-enabled>   
</log>

5. Change <log-file-severity>Info</log-file-severity> to <log-file-severity>Debug</log-file-severity>.
6. Change <stdout-severity>Notice</stdout-severity> to <stdout-severity>Debug</stdout-severity>.
7. Find the line </web-server> and after this line insert the following section:

<server-debug>
  <debug-scope>
  <name>weblogic.servlet.internal</name>
  <enabled>true</enabled>
  </debug-scope>
  <debug-scope>
  <name>weblogic.servlet.internal.session</name>
  <enabled>true</enabled>
  </debug-scope>
  <debug-scope>
  <name>weblogic.servlet.logging</name>
  <enabled>true</enabled>
  </debug-scope>
  <debug-http>true</debug-http>
  <debug-url-resolution>true</debug-url-resolution>
  <debug-http-sessions>true</debug-http-sessions>
  <debug-http-logging>true</debug-http-logging>
  <debug-web-app-module>true</debug-web-app-module>
</server-debug>

8. Save the changes to the config.xml by pressing Esc then wq!
9. Stop and start the RSA Web Tier service for the changes to take effect.  

Unix

cd WT_HOME/webtierBootstrapper/server
./rsaserv stop all
./rsaserv start all

Windows

1. ​On the Web Tier server, click Start > Run.
2. Type services.msc and press Enter.
3. Right-click on RSA Webtier Bootstrapper Server and select Stop then Start or select Restart.

The change to config.xml will write more data into the <WTHOME>/server/logs/AdminServer.log file.