Enabling advanced Ranger Accounts Server diagnostics

Question

Is there any way to show exactly what information is being received and processed by the Ranger Accounts Server?

Symptoms

N/A

Resolution

Instructions

Yes, Add the following registry key and value on the server running the Ranger Accounts Server. This will enable advanced diagnostics that may indicate the source of account lookup errors.

HKEY_LOCAL_MACHINESOFTWARE Hyperion Security SoftwareRangerAccss
Create a DWORD value called "Diagnostic Level" with values of either 0, 1, 2 or 3
representing the diagnostic level.

Level 0 - Turn all diagnostics off. Same as deleting the key completely.

Level 1 - Enable basic logging of the results of all Accounts Server lookups.
i.e. Displays the username and the Ranger group returned to the client.

Level 2 - Enables More detailed logging of the lookup process, showing all the groups a user is a member of and the group returned to the client.

Level 3 - Enables detailed logging which shows all the groups a user is a member of, and each Ranger group processed until the correct group found and returned to the client. This level also writes a log when the group priority list is refreshed after RangerAdmin writes the "Groups2.pri" file.

Note: This functionality was added in the Ranger 4.03 SR1.