3.3 Installing the ACDI Driver

The ACDI driver connects Identity Manager and Designer to ACDI.

To install the ACDI driver, perform the following steps:

Step 1: Copying files from the folders

  1. Navigate to the location where you have extracted the acdi_v24.2.zip.

  2. Navigate to the AuditDriver folder location.The AuditDriver folder contains:

    • Designer folder

    • Server folder

    • version.txt file

  3. Copy the files from the Server folder to the machine where Identity Manager is installed.

    • For Linux, copy the files to /opt/novell/eDirectory/lib/dirxml/classes.

      For example, scp root@acdip:/opt/acdi/AuditDriver/Server/* /opt/novell/eDirectory/lib/dirxml/classes/

    • For Windows, copy the files to C:\NetIQ\Identity manager\NDS\lib.

  4. Restart Identity Manager.

  5. Copy the files from the Designer folder to the machine where Designer is installed. Later, add these files or packages to the Designer project.

Step 2: Copying Keystore and a self-signed certificate to Identity Manager machine

The installer automatically creates a keystore file and generates a self-signed certificate within it. Navigate to the /opt/acdi/certs folder and copy the keystore.pfx file to the machine to the Identity Manager machine. For example, /opt/acdi

Alternatively, you can download the keystore file from the ACDI user interface.

  1. Log in to ACDI.

  2. Click Administration > Event Service (eDirectory) under Data Collection.

  3. Click Download Keystore.

    The downloaded keystore (public_keystore.pfx) file contains a public certificate. The default password is changeit.

NOTE:

  • Remember the location where you saved the keystore file. You must specify it while configuring the driver settings.

  • Ensure to change the default password of the keystore file.

Step 3: Importing packages to Designer

  1. Launch Designer.

  2. Open the project. Right-click Package Catalog and select Import package.

  3. Click Browse and select all packages you copied in Step 1: Copying files from the folders, then click Open.

  4. Click OK to import the packages.

Step 4: Creating and configuring ACDI Driver in Designer

  1. In an open Designer project, right-click the driver set for your project, then select New > Driver.

  2. In the Driver Configuration Wizard, select ACDI Base and click Next.

  3. On the Select Optional features window, click Next.

  4. Specify the properties you want to use for the driver:

    Property

    Description

    Driver Name

    Specify a name for the ACDI driver.

    OpenSearch Server

    Define the URL of your server. It must contain protocol, domain name, and port. If a reverse proxy is used, the URL contains OpenSearch as well.

    User (for OpenSearch Basic Authentication)

    Set a user which has access to OpenSearch. Default is osadmin. Also set a password for this user.

    KeyStore filepath (for HTTPS connection)

    Path to the keystore saved in Step 2 and the password.

  5. Click Next > Finish.

  6. Right-click the ACDI driver, click Properties, and check the Driver configuration.

    For example, in the Startup Option, select the Manual radio button.You can view the details you specified while creating the ACDI driver in Driver Parameters > Subscriber Options.

    NOTE:You might need to enter the passwords again.

  7. In the Properties window, select Trace. Ensure that the Trace level is set to 5. Also configure Trace file. For example, var/log/idm/acdi/acdi.log

Step 5: Deploying the ACDI Driver

  1. In the Designer’s Modeler view, select the ACDI driver and click the Deploy icon.

  2. Review the deployment summary and click Deploy.

  3. Review the deployment results and click OK.

Step 6: Starting the ACDI Driver

To start the driver, select the ACDI driver in the modeler view of Designer and click the Start Driver icon.

Step 8: Verifying the connection between Identity Manager and ACDI driver

You can check if the ACDI driver successfully connected Identity Manager to ACDI.

For example, you can modify an object description in Identity Console and check if the change is reflecting in NetIQ Audit Dashboard.Check the description by going to Dashboards > NetIQ Audit Dashboard > Audit Events on the ACDI interface.

NOTE:To audit and monitor custom classes or attributes, you must add them to the ACDI Driver filter.