Saw this useful tip on the grapevine (Thanks to Vernon for this) when troubleshooting issues with the Active Directory User Manager (ADUM) provider.

In 4.6.1, more advanced debugging can be enabled by setting additional flags in the RoleInit field in the SecurityLabels table in the K2HostServer database.

There are two settings explained in KB001286, LogLevel and LogSize.

• LogLevel values can be set to None, Error, Debug, All (in order of increasing amount of log data).
• LogSize specifies the size in MB before it rolls to the next log file.  i.e. LogSize=1 will roll the log when it hits 1MB.  The file name is in the format AdumError[Date]_[Increment].log (It used to be AdumError1.txt).

To replace it (make sure you do backups before you do this!), you can use the following script.

!!! Copy your own RoleInit value and replace it in the script.  Add/Modify the section highlighted in yellow.

USE [K2HostServer]

GO

UPDATE [HostServer].[SecurityLabel]

SET [RoleInit] = '<roleprovider><init>ADCache=0;LDAPPath=LDAP://DC=DENALLIX,DC=COM;ResolveNestedGroups=False;IgnoreForeignPrincipals=False;
IgnoreUserGroups=False;MultiDomain=False;OnlyUseSecurityGroups=False;LogLevel=Error,Debug;LogSize=1;DataSources=&amp;amp;lt;DataSources&gt;&lt;DataSource Path="LDAP://DC=DENALLIX,DC=COM" NetBiosName="DENALLIX" /&gt;&lt;/DataSources&gt;;;</init><login /><implementation assembly="ADUM, Version=4.0.0.0, Culture=neutral, PublicKeyToken=16a2c5aaaa1b130d" type="ADUM.K2UserManager2" /><properties><user><property name="Name" type="System.String" /><property name="Description" type="System.String" /><property name="Email" type="System.String" /><property name="Manager" type="System.String" /><property name="SipAccount" type="System.String" /><property name="ObjectSID" type="System.String" /><property name="DisplayName" type="System.String" /><property name="CommonName" type="System.String" /><property name="UserPrincipalName" type="System.String" /></user><group><property name="Name" type="System.String" /><property name="Description" type="System.String" /><property name="Email" type="System.String" /></group></properties></roleprovider>'

WHERE SecurityLabelName = 'K2'

GO

For other versions (this will work for 1390 till before 4.6.1), the advance logging can be enabled by adding DebugLevel=2.

To replace it (make sure you do backups before you do this!), you can use the following script.

!!! Copy your own RoleInit value and replace it in the script. Add/Modify the section highlighted in yellow.

USE [K2HostServer]

GO

UPDATE [SecurityLabel]

SET [RoleInit] = '<roleprovider><init>ADCache=0;LDAPPath=LDAP://DC=DENALLIX,DC=COM;ResolveNestedGroups=False;IgnoreForeignPrincipals=False;
IgnoreUserGroups=False;MultiDomain=False;OnlyUseSecurityGroups=False;DebugLevel=2;DataSources=&amp;amp;lt;DataSources&gt;&lt;DataSource Path="LDAP://DC=DENALLIX,DC=COM" NetBiosName="DENALLIX" /&gt;&lt;/DataSources&gt;;;</init><login /><implementation assembly="ADUM, Version=4.0.0.0, Culture=neutral, PublicKeyToken=16a2c5aaaa1b130d" type="ADUM.K2UserManager2" /><properties><user><property name="Name" type="System.String" /><property name="Description" type="System.String" /><property name="Email" type="System.String" /><property name="Manager" type="System.String" /><property name="SipAccount" type="System.String" /><property name="ObjectSID" type="System.String" /><property name="DisplayName" type="System.String" /><property name="CommonName" type="System.String" /><property name="UserPrincipalName" type="System.String" /></user><group><property name="Name" type="System.String" /><property name="Description" type="System.String" /><property name="Email" type="System.String" /></group></properties></roleprovider>'

WHERE SecurityLabelName = 'K2'

GO