Custom configuration for an eDirectory Agent instance

Topic 51051 | Using eDirectory Agent | TRITON AP WEB and Web Filter & Security | v8.0.x, v8.1.x | 12-Oct-2015

After configuring eDirectory Agent behavior in the TRITON console, you can customize the behavior of a specific eDirectory Agent instance in wsedir.ini, the agent's initialization file.

Some eDirectory Agent settings can only be configured via the TRITON console.

Some settings can only be configured via the initialization file.

Parameters that can be modified via either method are marked with an asterisk (*).

To use wsedir.ini to configure an agent instance:

Use the Windows Services tool or /opt/Websense/WebsenseDaemonControl command to stop Websense eDirectory Agent.

Navigate to the Websense bin directory (C:\Program Files\Websense\Web Security\bin or /opt/Websense/bin/, by default) and open wsedir.ini in a text editor.

Modify or add parameters and their values as described below.

Save and close the INI file.

Restart eDirectory Agent.

The parameters and values described in this document are case-sensitive.

Before making changes to the initialization files, please consider that the default values are designed to maximize accuracy and efficiency in most environments. In most cases, Websense, Inc., recommends leaving the default values as they are.

DebugLevel

Determines the detail level of the eDirectory Agent diagnostic activity. (See definition for DebugMode.)


Default	0
Options	0, 1, 2, 3
Required	No
Synopsis	Specifies the level of log file detail provided for debugging purposes, from none (0) to high (3). Any value outside the range of 0-3 is interpreted as 0.

DebugMode

Controls the eDirectory Agent diagnostic activity.


Default	Off
Options	On, Off
Required	No
Synopsis	Enables or disables eDirectory Agent's built-in diagnostic (logging and debugging) capabilities. This can be a valuable tool for troubleshooting user identification problems, and determining whether eDirectory Agent is identifying Novell eDirectory users correctly.

DN*

Novell eDirectory server administrator name.


Default	None
Options	Any valid distinguished user name
Required	Yes
Synopsis	The distinguished name of a user with administrative rights in Novell eDirectory server. Novell eDirectory requires an authenticated name to issue LDAP requests. Should match the account specified on the Settings > General > Directory Services page in the TRITON console.

LogFile

Output file for eDirectory Agent diagnostic messages.


Default	N/A
Options	Any string of characters valid for your operating system
Required	No
Synopsis	If you have enabled DebugMode, specify a name for the text file where eDirectory Agent sends diagnostic (log) output.

password*

Novell eDirectory server administrator password.


Default	N/A
Options	Any string of characters
Required	Yes
Synopsis	The password for the Novell eDirectory server administrator account specified via DN*. Should match the password specified on the Settings > General > Directory Services page in the TRITON console.

PollInterval

Interval at which to query Novell eDirectory for user logon sessions.

Default

30000 [milliseconds = 30 seconds]

Options

Any number of milliseconds

Required

Yes

Synopsis

Determines how long eDirectory Agent waits between Novell eDirectory server queries.

A higher query frequency increases accuracy in identifying users but increases network traffic.

A lower frequency may decrease immediacy in identifying users, but also decreases network traffic.

QueryMethod

Method (NCP or LDAP) used to query Novell eDirectory for user logon sessions, and whether each query is a full query are enabled (see Enabling full queries).


Default	1 [NCP]
Options	0, 1, 2, 3 [LDAP, NCP, LDAP + full queries, NCP + full queries]
Required	Yes
Synopsis	Determines whether eDirectory Agent uses NCP or LDAP to communicate with Novell eDirectory servers. Also determines whether eDirectory Agent performs a full query each time it polls the Novell eDirectory server. Enabling full queries is not recommended in larger networks, because the length of time required to return query results depends on the number of logged on users. The more logged-on users there are, the higher the performance impact.

SearchBase*

Novell eDirectory server root context.


Default	N/A
Options	Any string of characters
Required	Yes
Synopsis	The DN (distinguished name) of your Novell eDirectory root context. This value should match the root context specified on the Settings > General > Directory Services page in the TRITON console.

Server

IP addresses or names of machines running Novell eDirectory.


Default	N/A
Options	A valid IP address or host name
Required	Yes
Synopsis	Specify the identity of any machine running Novell eDirectory so that eDirectory Agent can query the directory service. If you are running multiple instances of Novell eDirectory, place each server entry on a separate line.