summaryrefslogtreecommitdiffstats
path: root/base/server/cmsbundle
diff options
context:
space:
mode:
authorChristina Fu <cfu@redhat.com>2015-05-07 12:14:19 -0700
committerChristina Fu <cfu@redhat.com>2015-05-13 09:05:38 -0700
commitccf2eb507471a9f19a1768befadeff404c96635e (patch)
tree98a40027631ce6c577558c563906f9a28ac49c25 /base/server/cmsbundle
parenta21f3139a3fa2cecf7a0f782e2a40b83279a80fa (diff)
downloadpki-ccf2eb507471a9f19a1768befadeff404c96635e.tar.gz
pki-ccf2eb507471a9f19a1768befadeff404c96635e.tar.xz
pki-ccf2eb507471a9f19a1768befadeff404c96635e.zip
Ticket 1160 audit logging needed: REST API auth/authz; kra for getKeyInfo
- (1) REST API auth/authz - this patch addresses the first part of this ticket where auditing is completely missing for authentication and authorization at the REST interface.
Diffstat (limited to 'base/server/cmsbundle')
-rw-r--r--base/server/cmsbundle/src/LogMessages.properties2
1 files changed, 2 insertions, 0 deletions
diff --git a/base/server/cmsbundle/src/LogMessages.properties b/base/server/cmsbundle/src/LogMessages.properties
index 10d9ae5ca..6fbd43404 100644
--- a/base/server/cmsbundle/src/LogMessages.properties
+++ b/base/server/cmsbundle/src/LogMessages.properties
@@ -2131,6 +2131,7 @@ LOGGING_SIGNED_AUDIT_CERT_STATUS_CHANGE_REQUEST_PROCESSED_7=<type=CERT_STATUS_CH
# e.g. "read" for an ACL statement containing "(read,write)"
#
LOGGING_SIGNED_AUDIT_AUTHZ_SUCCESS_4=<type=AUTHZ_SUCCESS>:[AuditEvent=AUTHZ_SUCCESS][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}] authorization success
+LOGGING_SIGNED_AUDIT_AUTHZ_SUCCESS_5=<type=AUTHZ_SUCCESS>:[AuditEvent=AUTHZ_SUCCESS][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}][Info={4}] authorization success
#
# LOGGING_SIGNED_AUDIT_AUTHZ_FAIL
# - used when authorization has failed
@@ -2140,6 +2141,7 @@ LOGGING_SIGNED_AUDIT_AUTHZ_SUCCESS_4=<type=AUTHZ_SUCCESS>:[AuditEvent=AUTHZ_SUCC
# e.g. "read" for an ACL statement containing "(read,write)"
#
LOGGING_SIGNED_AUDIT_AUTHZ_FAIL_4=<type=AUTHZ_FAIL>:[AuditEvent=AUTHZ_FAIL][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}] authorization failure
+LOGGING_SIGNED_AUDIT_AUTHZ_FAIL_5=<type=AUTHZ_FAIL>:[AuditEvent=AUTHZ_FAIL][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}][Info={4}] authorization failure
#
# LOGGING_SIGNED_AUDIT_INTER_BOUNDARY_SUCCESS
# - used when inter-CIMC_Boundary data transfer is successful