Chapter 2 HPSS PlanningHPSS Installation Guide September 2002 89Release 4.5, Revision 22.8.4.7 Name SpaceEnforcement of access to HPSS name space objects is the responsibility of the HPSS Name Server.The access rights granted to a specific user are determined from the information contained in theobject's ACL.2.8.4.8 Security AuditHPSS provides capabilities to record information about authentication, file creation, deletion,access, and authorization events. The security audit policy in each HPSS server determines whataudit records a server will generate. In general, all servers can create authentication events, but onlythe Name Server and Bitfile Server will generate file events. The security audit records are sent tothe log file and are recorded as security type log messages.2.8.5 Logging PolicyThe logging policy provides the capability to control which message types are written to the HPSSlog files. In addition, the logging policy is used to control which alarms, events, and statusmessages are sent to the Storage System Manager to be displayed. Logging policy is set on a perserver basis. Refer to Section 6.6.4: Configure the Logging Policies (page 293) for a description of thesupported message types.If a logging policy is not explicitly configured for a server, the default log policy will be applied.The default log policy settings are defined from the HPSS Log Policies window. If no Default LogPolicy entry has been defined, all record types except for Trace are logged. All Alarm, Event, andStatus messages generated by the server will also be sent to the Storage System Manager.The administrator might consider changing a server’s logging policy under one of the followingcircumstances.• A particular server is generating excessive messages. Under this circumstance, theadministrator could use the logging policy to limit the message types being logged and/orsent to the Storage System Manager. This will improve performance and potentiallyeliminate clutter from the HPSS Alarms and Events window. Message types to disable firstwould be Trace messages followed by Debug and Request messages.• One or more servers is experiencing problems which require additional information totroubleshoot. If Alarm, Debug, or Request message types were previously disabled,enabling these message types will provide additional information to help diagnose theproblem. HPSS support personnel might also request that Trace messages be enabled forlogging.2.8.6 Location PolicyThe location policy provides the ability to control how often Location Servers at an HPSS site willcontact other servers. It determines how often remote Location Servers are contacted to exchangeserver location information. An administrator tunes this by balancing the local site's desire foraccuracy of server map information against the desire to avoid extra network and server load.
