9.2 Configuring

This section contains the following topics:

9.2.1 Editing Environment Registry Keys

After DAS is successfully installed, it initializes some registry keys. You must edit the registry keys to configure the system for your workstation.

To view and edit the registry keys:

  1. Click Start > Run, type RegEdit, then click OK. The Registry Editor is displayed.

  2. Browse to HKEY_LOCAL_MACHINE\SOFTWARE\Novell\ARS.

  3. Modify the following keys to adapt the installation to your workstation environment:

    Key Name

    Value

    Description

    ConfigFile

    C:\Program Files\NetIQ\Securelogin\Desktop Automation Services\actions.xml

    The value is the default value.

    This is the pathname for the actions.xml file that defines the actions for the workstation.

    Use this key only when you are referring to an actions.xml file loaded locally to the workstation.

    If you are using a directory-based actions.xml file, set the key value to null (blank).

    ConfigObject

    cn=ARSControl

    ou=ARS

    o=CHIP

    This is the value of the fully distinguished name (DN) of an ARSControl object.

    This key is the object in the directory that stores the actions.xml file. It can be managed through Novell iManager.

    ConfigTree

    IP address of the directory: xxx.xxx.xxx.xxx

    The default value is null.

    This value can be the tree name or the IP address of the eDirectory tree that contains the ARSControl object.

    Leave the key blank if the ConfigFile key is used with a locally installed actions.xml file on the workstation.

    NOTE:The tree name must be specified for DAS to access an ARSControl object.

    The server on which the object is residing must be SLP enabled.

9.2.2 Managing DAS Logs

You can configure the ARSControl.exe application for four levels of logging. These logs are stored in the location %localAppdata%\SecureLogin\Logs\SSODebug.txt. You can enable or disable DAS logging manually by updating the registry settings or using the SecureLogin Logging Manager. For more information on SecureLogin Logging Manager refer, Managing Log Settings for SecureLogin Components.

To enable the DAS logs using the registry settings, perform the following:

  1. Click Start -> Run, enter RegEdit, then click Ok. The Registry Editor is displayed.

  2. Browse to HKLM\SOFTWARE\Protocom\SecureLogin\Logging\

  3. Right click and add a new key entry of type DWORD and name it as DAS.

  4. Set the value for the DAS key entry as follows:

    Table 9-1 DAS Log Registry Key Values

    Value

    Name or Log Type

    0

    Debug

    1

    Information

    2

    Warning

    3

    Fatal

NOTE:To disable the DAS logs, delete the respective DAS key entry from the registry.

9.2.3 Managing the actions.xml File through eDirectory and iManager

During the installation of DAS, the actions.xml file is set up to be managed locally on the workstation. You can decide to centrally manage the actions.xml file through eDirectory and Novell iManager.

To centrally manage the actions.xml file on eDirectory:

Extending the Schema for eDirectory

  1. Locate the ARSControl.sch file in C:\Program Files\NetIQ\SecureLogin\Desktop Automation Services\Tools folder.

  2. Ask your eDirectory administrator to help you correctly extend the schema to add a new ARSConfig object to eDirectory.

    For a detailed scema extension procedure see the Novell eDirectory 8.8 Administration Guide at the Novell Documentation Web site.

Setting Workstation Registry Settings

You can configure ARS.exe through the Windows registry settings to know where to locate the actions.xml configuration file. For information on where the registry keys are stored, see Editing Environment Registry Keys.

To help you set the registry settings to manage the actions.xml file on the eDirectory, the sample registry setup files are located in the C:\Program Files\NetIQ\SecureLogin\Desktop Automation Services\Tools folder.

  1. Open ARS eDir Config.reg, which is located in the Tools folder. You can edit this file by using an editor such as Notepad to set the correct directory setting for your environment.

  2. Save the changes.

  3. To apply these changes, double-click ARS eDir Config.reg.

    If you are prompted to apply the changes, click Yes.

  4. Verify that the changes are applied.

    After the registry settings are set, the ARS.exe points to eDirectory on startup for its actions.xml file.

Loading the actions.xml File to eDirectory

The das.npm file must be loaded for you to manage the actions.xml file in iManager 2.6 and later. The das.npm fileis located in the iManager folder of the installer package.

  1. Launch iManager.

  2. Log in by using your username, password, and eDirectory tree name.

  3. Under Roles and Tasks, select DAS Management > Create Configuration.

    If you are modifying an existing actions.xml file, select Modify Configuration.

  4. Specify the distinguished name (DN) for ARSConfig. The iManager entry is displayed with the contents of the actions.xml file.

  5. Cut and paste the actions.xml text to the browser window.

  6. Click OK to save the changes.

  7. Click Apply to apply the changes and exit.