5.5 Identity Reporting Module

This section defines the settings for the Identity Reporting Module. The program displays the basic parameters. To view all parameters, click Advanced Settings.

IMPORTANT:The Identity Reporting Module requires an Event Auditing Service. The Event Auditing Service runs only on Linux computers. If you are installing on a Windows computer, you must install the Event Auditing Service on a Linux computer first before you can continue with the configuration of the Identity Reporting Module on Windows.

EAS System Passsword

Applies to Windows servers or if the Event Auditing Service is not running on the local computer.

Specify the system password of your EAS system that is installed on a Linux computer. The system password is found in the activemqusers.properties file located in the /etc/opt/novell/sentinel_eas/config directory on your Linux computer.

idmrptsrv password

Specifies the password for the owner of the database schemas and objects for reporting.

The installation process creates the idmrptsrv account.

idmrptuser password

Specifies the password for the user with read-only access to the reporting data.

The installation process creates the idmrptuser account.

dbauser password

Specifies the password for the administrator of the SIEM database that the Event Auditing Service and Identity Reporting use (Identity Information Warehouse).

The installation process creates the dbauser account.

EAS server host

Applies to Windows servers or if the Event Auditing Service is not running on the local computer.

Specify the IP address or DNS name of the server that is running your Event Auditing Service and the PostgreSQL database.

Database port

Applies to Windows servers or if the Event Auditing Service is not running on the local computer.

Specify the port through which the PostgreSQL database communicates. The default port is 15432.

EAS dbauser password

Specify the password of the dbauser of the PostgreSQL database.

Managed System Gateway port

Specifies the port that you want the MSGW driver to use for communicating with the Identity Vault.

The default value is 7707.

Data Collection Service host

Specifies the DNS name or IP address of the server that hosts Data Collection Service. Do not use localhost.

Advanced Settings

All of the remaining settings are under Advanced Settings. If you do not make any changes to the Advanced Settings, the configuration program uses the default settings listed.

Enable subcontainer search

Select whether the Identity Reporting Modules support subcontainer searches. By default, this option is enabled.

Use secure LDAP connections

Select whether you want the server to communicate over a secure LDAP connection.

You must also specify the LDAP port.

LDAP port

Specifies the port for communication with the server that hosts the Identity Vault. Specify the same value that you specified for LDAP secure port in Section 5.1, Identity Vault.

Alternatively, you can specify a clear text port for non-secure communication. If you do so, do not select Use secure LDAP connections.

Token expiration value (in minutes)

Specify the length of time to retain a token for authentications. The default value is 60 minutes.

Retain completed reports: Duration and Units

Select the amount of time that the Identity Reporting Module retains completed reports before deleting them. For example, to specify six months, select Month for the duration and then specify 6 for the units.

Subcontainer login attribute

Specifies the login attribute that Identity Manager uses to search the subtree of a specified user container when gathering data for reports. The default value is cn.

NOTE:If you specify a DN that includes special characters, you might need to escape those characters. For more information, see RFC 2253/4514 Section 2.

SMTP server host

Specifies the DNS name or IP address of the email server that you want the Identity Reporting Module to use when sending notifications. The default value is localhost. Change to a valid IP address or DNS name.

SMTP server port

Specifies the port number for the email server. The default value is 435.

SMTP userID

(Conditional) When using authentication for communication with the email server, specifies the email address that you want to use for authentication.

You must also select Requires server authentication for SMTP.

SMTP user password

Specifies the password associated with the email address that you want to use for authentication.

Default email address

Specifies the email address that you want Identity Reporting to use as the origination for email notifications.

Use SSL for SMTP

Specifies whether you want to use SSL for communication with the email server. By default, this option is not enabled.

Require server authentication for SMTP

Specifies whether you want to use authentication for communications with the email server.

You must also specify values for SMTP userid and SMTP user password. By default, this option is not enabled.