From ccf2eb507471a9f19a1768befadeff404c96635e Mon Sep 17 00:00:00 2001 From: Christina Fu Date: Thu, 7 May 2015 12:14:19 -0700 Subject: Ticket 1160 audit logging needed: REST API auth/authz; kra for getKeyInfo - (1) REST API auth/authz - this patch addresses the first part of this ticket where auditing is completely missing for authentication and authorization at the REST interface. --- base/server/cmsbundle/src/LogMessages.properties | 2 ++ 1 file changed, 2 insertions(+) (limited to 'base/server/cmsbundle/src') diff --git a/base/server/cmsbundle/src/LogMessages.properties b/base/server/cmsbundle/src/LogMessages.properties index 10d9ae5ca..6fbd43404 100644 --- a/base/server/cmsbundle/src/LogMessages.properties +++ b/base/server/cmsbundle/src/LogMessages.properties @@ -2131,6 +2131,7 @@ LOGGING_SIGNED_AUDIT_CERT_STATUS_CHANGE_REQUEST_PROCESSED_7=:[AuditEvent=AUTHZ_SUCCESS][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}] authorization success +LOGGING_SIGNED_AUDIT_AUTHZ_SUCCESS_5=:[AuditEvent=AUTHZ_SUCCESS][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}][Info={4}] authorization success # # LOGGING_SIGNED_AUDIT_AUTHZ_FAIL # - used when authorization has failed @@ -2140,6 +2141,7 @@ LOGGING_SIGNED_AUDIT_AUTHZ_SUCCESS_4=:[AuditEvent=AUTHZ_SUCC # e.g. "read" for an ACL statement containing "(read,write)" # LOGGING_SIGNED_AUDIT_AUTHZ_FAIL_4=:[AuditEvent=AUTHZ_FAIL][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}] authorization failure +LOGGING_SIGNED_AUDIT_AUTHZ_FAIL_5=:[AuditEvent=AUTHZ_FAIL][SubjectID={0}][Outcome={1}][aclResource={2}][Op={3}][Info={4}] authorization failure # # LOGGING_SIGNED_AUDIT_INTER_BOUNDARY_SUCCESS # - used when inter-CIMC_Boundary data transfer is successful -- cgit