17.2 Viewing Information About EBA

The following lists different tools and utilities that provide information about different aspects of an EBA-enabled server.

Utility

Description

ndstrace

Provides information about EBA operations such as EBA request handling, issue of NCP CA certificates. To view this information:

On Linux, enable the EBA tag of ndstrace.

On Windows, load the dstrace module enabled with EBA tag in NDSCons.exe.

ndsd.log, dhost.log

Provide information about EBA start and stop messages.To view this information:

On Linux, see the ndsd.log file of the server where you configured EBA.

On Windows, this information is logged in the dhost.log file.

ndscheck

Provides the status of EBA on a server - whether the server is EBA–enabled.

If the server is EBA-enabled, the output of the command displays information such as NCP CA certificate validity, whether the server is acting as EBA CA, and so on.

When you run the ndscheck command remotely, ensure that the EBA CA certificate of the tree has been downloaded to the local computer. For more information, see Running the ebaclientinit Utility.

ndslogin

Provides troubleshooting information about EBA configuration.

For troubleshooting EBA configuration, log in to eDirectory by using the ndslogin command with -c argument.

For example: ndslogin <admin DN> –p <password> –c

For a successful login, ensure that the EBA CA certificate of the tree has been downloaded to the local computer. For more information, see Running the ebaclientinit Utility.

schema.log

The schema.log file of the server where EBA is configured contains information about schema extension for EBA.

nioutput.log

Specifies whether EBA was selected during eDirectory configuration.

iMonitor

iMonitor lets you monitor your EBA-enabled servers for the following information:

  • Determine whether a server is EBA–enabled by looking at the EBA enabled parameter under the Connection Information tab of the Agent Configuration page. If the value of this parameter is true, the server is EBA–enabled. Otherwise, the value for this parameter is false.

  • Display the same debugging information that you can view in ndstrace on Linux.The trace configuration page includes a tag for EBA for displaying this information.

  • View information about the validity of the EBA CA certificate, NCP CA certificate, and the EBA–enabled status of the server on the Agent Health page. These items appear Green if the certificate is valid and the EBA attributes are unaffected.

  • View the EBA Request verb on an EBA–enabled server in the Verb Statistics page.

  • View the iMonitor Health Check Agent page for the following:

    • Whether the server is EBA-enabled

    • Whether the server hosts EBA CA

    • Whether the EBA CA certificate is valid

    • Whether the NCP CA certificate is valid