PingDirectory

Configuring log signing

Configure log signing for a log publisher.

Steps

  1. To enable log signing for a log publisher, use dsconfig.

    Example:

    In this example, the sign-log property is set on the File-based Audit Log Publisher.

    $ bin/dsconfig set-log-publisher-prop --publisher-name "File-Based Audit Logger" \
      --set sign-log:true
  2. Disable and then re-enable the log publisher for the change to take effect.

    Example:

    $ bin/dsconfig set-log-publisher-prop --publisher-name "File-Based Audit Logger" \
      --set enabled:false
    $ bin/dsconfig set-log-publisher-prop --publisher-name "File-Based Audit Logger" \
      --set enabled:true