20.3 Monitoring Health of Identity Servers

This section discusses the following topics:

20.3.1 Monitoring the Health of an Identity Server

To view detailed health status information for an Identity Server:

  1. In the Administration Console, click Devices > Identity Servers > [Name of Server] > Health.

    The status icon is followed by a description that explains the significance of the current state. For more information about the icons, see Health States.

  2. To ensure that the information is current, select one of the following:

    • Click Refresh to refresh the page with the latest health available from the Administration Console.

    • Click Update from Server to send a request to the Identity Server to update its status information. This can take a few minutes.

  3. Examine the Services Detail section that displays the status of each service. For an Identity Server, this includes information such as the following:

    Status Category

    If not healthy

    Status: Indicates whether the Identity Server is online and operational.

    Verify whether the Identity Server has been stopped or is not configured.

    Also verify that network problems are not interfering with communications between the Identity Server and the Administration Console.

    Services: Indicates the general health of all configured services.

    If one service is unhealthy, this category reflects that status. See the particular service that also displays an unhealthy status.

    Identity Server Configuration: Indicates the status of the configuration.

    Configure the Identity Server or assign the server to a configuration.See,Configuring an Identity Server

    Configuration Datastore: Indicates the status of the installed configuration datastore.

    You might need to restart Tomcat or reinstall the Administration Console.

    If you have a backup Administration Console, you can restore it. See Section 24.0, Back Up and Restore.

    If you don’t have a backup, you can try repairing the configuration datastore. See Repairing the Configuration Datastore.

    If you want to convert a secondary console to your primary console, see Converting a Secondary Administration Console into a Primary Console.

    User Datastores: Indicates whether the Identity Server can communicate with the user stores, authenticate as the admin user, and find the search context.

    Ensure that the user store is operating and configured correctly. You might need to import the SSL certificate for communication with the Identity Server. See Configuring Identity User Stores.

    Signing, Encryption and SSL Connector Keys: Indicates whether these keystores contain valid a key.

    Click Identity Servers > Edit > Security and replace any missing or expired keys.

    System Incoming and Outgoing HTTP Requests: Appears when throughput is slow. This health check monitors incoming HTTP requests, outgoing HTTP requests on the SOAP back channel, and HTTP proxy requests to cluster members. If one or more requests remain in the queue for over 2 minutes, this health check appears.

    Verify that all members of the cluster have sufficient bandwidth to handle requests. If a cluster member is going down, the problem resolves itself as other members of the cluster are informed that the member is down.

    If a cluster member is slow because it does not’ have enough physical resources (speed or memory) to handle the load, upgrade the hardware.

    SSL Communication: Indicates whether SSL communication is operating correctly. This health check appears only when the SSL communication check fails.

    Check SSL connectivity. Check for expired SSL certificates.

    Audit Logging Server: Indicates whether the audit agent is functioning and able to log events to the auditing server.

    Auditing must be enabled on the Identity Server to activate this health check (click Devices > Identity Servers > Edit > Logging).

    Check the network connection between the Identity Server and the auditing server.

    See “Troubleshooting Novell Audit”.

  4. Click Close.

20.3.2 Monitoring the Health of a Cluster

The health page displays the current health of the cluster.

  1. In the Administration Console, click Devices > Identity Servers > [Name of Cluster] > Health.

    The status icon is followed by a description that explains the significance of the current state. For more information about the icons, see Health States.

  2. To ensure that the information is current, click Refresh to refresh the page with the latest health available from the Administration Console.

  3. To view health details about a specific member of the cluster, click the server’s health icon.