7.0 J2EE Agents (006)

Component 006

Subgroup 01: Management
Subgroup 02: Authentication (JAAS)
Subgroup 03: Authorization (JACC)
Subgroup 99: Policy PEP

Event Code	Message	Remedy
100601001	Could not find initial XML configuration in classPath	Cause: An initial XML configuration should exists in the NidsCommonAgent.jar but doesn’t when this error occurs. Action: Verify that Agent files are in the proper place.
100601002	Could not add agent specific information to initial configuration	Cause: Unexpected XML error, possibly from faulty XML libraries. Action: Submit requested logs and data.
100601003	Configuration of agent failed	Cause: Invalid configuration was sent to the agent. Action: Submit requested logs and data.
100601004	Could not create an LDAP connection	Cause: LDAP connection failed due to: 1) Network Outage, 2) DNS configuration, 3) port configurations, 4) Firewall configurations, etc. Action: Verify that the management server can be contacted.
100601005	Could not read JCC id file	Cause: File rights to the JCC ID file are denied. Action: Verify that the JCC ID file (named JBoss.id or WebSphere.id) is present and the application server has read access to the file.
100601006	Could not write to JCC id file	Cause: File creation rights to the jcc directory are denied to the application server. Action: Verify that the JCC ID file (named JBoss.id or WebSphere.id) is present and the application server has write access to the file.
100601007	Could not log configuration	Cause: Missing or outdated log jar files. Action: Check that logging utilities are present
100601008	Could not determine Agent Type	Cause: Agent Type property not set and/or JACC not configured properly. Action: Verify that these properties are set.
100602000	A Severe error occurred in the authentication module (JAAS)	Cause: The session might have timed out. Action: Submit requested logs/data.
100602001	The identity server returned a null or empty user name	Cause: The session might have timed out. Action: Retry
100602002	Returned -503 due to unconfigured identityServerBaseURL	Cause: The application server URL has not been configured. Action: Configure the agent to have the correct base URL
100602003	Couldn't configure SAX parser	Cause: Something is wrong with the Java environment, or the XML libraries are not configured. Action: Obtain latest XML libraries from apache.org and put them into the classpath.
100602004	Couldn't communicate with the identity server due to a null URL for the server	Cause: No trusted identity server is configured. Action: Configure the agent to have a trusted Identity Server.
100602005	Couldn't open an URL connection to the embedded server provider	Cause: Invalid or missing application URL. Action: Configure the agent to have a valid application URL. Restart the agent or application server where the agent resides.
100602006	Couldn't read response from the identity server	Cause: Connection might have been interrupted. Action: Retry, verify network connectivity, DNS resolution, etc.
100602007	Couldn't parse the XML document from the identity server	Cause: Unexpected response from the Identity Server Action: Submit requested logs/data.
100602008	Could not build the WebSphere principal and credential	Cause: Unexpected error in WebSphere Action: Submit requested logs/data.
100602009	WebSphere is not configured with global and server security	Cause: WebSphere does not have global security enabled. Action: Enable WebSphere for global and server security.
100602010	Could not parse system property 'com.novell.nids.agent.sessionVerificationMinutes'	Cause: This property is set to override the default time of 5 minutes. The set value for this property was not a valid Integer and could not be parsed. Action: Check the system property com.novell.nids.agent.sessionVerificationMinutes has a valid number.
100602011	AuthSessionCache cleanup thread existing	Cause: The session cache cleanup threat was terminated. Action: Check logs to see if other events may have caused this. Send logs to support.
100602012	An error was encountered in reflection code to get moduleID from HttpServletRequest	Cause: WebLogic API has been changed. Action: Contact Novell Support.
100602013	An Error occurred decoding a soap response	Cause: Java is corrupt and does not support UTF-8
500602001	Event occurred: Agent sent a redirect to nesp
500602002	Event occurred: Login Servlet received login from nesp
500602003	Event occurred: Verifying nidsID
500602004	Event occurred: Contacted esp for session and attributes
500602005	Event occurred: esp session successfully verified, posting login
500602006	Event occurred: LoginModule received login
500602007	Event occurred: LoginModule successfully logged in the user
500603008	Event occurred: JACC called for permission
500603009	Event occurred: JACC decision: permission allowed
500603010	Event occurred: JACC decision: permission denied
100603001	Failed to construct the policy enforcement points	Cause: An erroneous policy may have been sent from the management console. Action: Search for errors from the 099 subcomponent.
100603002	An error was encountered during policy evaluation	Cause: An erroneous policy may have been sent from the management console. Action: Search for errors from the 099 subcomponent.
100603003	Could not obtain a request object during policy evaluation	Cause: Unexpected error occurred evaluating a policy. Action: Submit requested logs/data. Search for errors from the 099 subcomponent.
100603004	Exception occurred persisting policies/roles to file	Cause: File rights denied access to read/write policy and roles file in WebSphere. Action: Verify that the file exists and can be written to by the application server.
200601000	A Warning message occurred in the management of the agent	Cause: A Warning message might indicate incorrect configuration. Action: If condition persists, submit requested logs/data.
200602000	A Warning message occurred in the authentication module (JAAS)	Cause: A Warning message might indicate incorrect configuration. Action: If condition persists, submit requested logs/data.
200603000	A Warning message occurred in the authorization module (JACC)	Cause: A Warning message might indicate incorrect configuration. Action: Submit requested logs/data.
300601000	Generic trace/debug message from agent management	Action: A trace/debug message does not indicate failure or misconfiguration, but it might help diagnosing a problem.
030060200	Generic trace/debug message from authentication module (JAAS)	Action: A trace/debug message does not indicate failure or misconfiguration, but it might help diagnosing a problem.
300603000	Generic trace/debug message from authorization module (JACC)	Action: A trace/debug message does not indicate failure or misconfiguration, but it might help diagnosing a problem.
200699002	Invalid input data. Invalid data has been received which prevents policy from being evaluated.	Action: See supplementary messages in logs for indication of specific problem.
200699003	PEP Configuration Error: invalid policy configuration data.	Cause: The Administration Console has produced an invalid policy configuration document Action: You can take any or all of the following actions: 1) Submit the log file (which includes an AM#500699030 log entry containing the policy configuration) to Novell Support to facilitate fixing the Administration Console. 2) Back up to a previous policy configuration that worked until the Administration Console has been fixed. 3) Examine the AM#500699030 log entry and determine the particular policy statement in error and remove it from your configuration until a fix for the Administration Console is available.
200699073	Policy Evaluation Error: condition data unavailable.	Action: See supplementary message in logs for indication of specific problem.
200699075	Invalid API arguments. Indicates an internal software error.	Action: See supplementary messages in logs for indication of specific problem.
500699030	J2EE Agent PEP Configuration: the J2EE Agent PEP has been configured without error.	Cause: Initial policy configuration applied from the Administration Console. Action: None. Informational only.
500699031	J2EE Agent PEP Policy Evaluation.	Cause: The J2EE Agent PEP has evaluated an access control policy for a protected resource. Action: None. Informational only.
500699032	J2EE Agent PEP SSL Required Evaluation.	Cause: The J2EE Agent PEP has evaluated if SSL is required for access to a protected resource. Action: No Action. Informational only.
500699033	J2EE Agent Startup.	Cause: J2EE Agent started. Action: No Action. Informational only.
500699034	J2EE Agent Shutdown.	Cause: J2EE Agent shutdown. Action: No Action. Informational only.
500699035	J2EE Agent Reconfigured.	Cause: New policy configuration applied from Access Manager Administration Console. Action: None. Informational only.
500699036	J2EE Agent Authentication Successful.	Cause: A user requesting access to a protected resource has been successfully authenticated with the Identity Server. Action: None. Informational only.
500699037	J2EE Agent Authentication Failed.	Cause: A user requesting access to a protected resource has been denied authentication by the Identity Server. Action: None. Informational only.
500699038	J2EE Agent Web Resource Access Allowed.	Cause: A user has been granted access to a protected web resource. Action: None. Informational only.
500699039	J2EE Agent Web Resource Access Denied.	Cause: A user has been denied access to a protected web resource. Action: None. Informational only.
500699040	J2EE Agent Clear Text Access Allowed.	Cause: A user has been granted clear text access to a protected web resource. Action: None. Informational only.
500699041	J2EE Agent Clear Text Access Denied.	Cause: A user has been denied clear text access to a protected web resource. Action: None. Informational only.
500699042	J2EE Agent EJB Access Allowed.	Cause: A user has been granted access to a protected EJB resource. Action: None. Informational only.
500699043	J2EE Agent EJB Access Denied.	Cause: A user has been denied access to a protected EJB resource. Action: None. Informational only.