Add an LDAP Audit system
Add an LDAP Audit system
Add the possibility to log into the LDAP who edited which object and at what time/date. Add a management class to consult and search in this information.
(from redmine: issue id 4774, created on 2016-05-11, closed on 2016-06-10)
- Changesets:
- Revision 3b6b48b6 by Côme Chilliet on 2016-06-02T09:18:00.000Z:
Fixes #4774 Reorganized logging class to ease further modifications- Revision 3eb95523 by Côme Chilliet on 2016-06-02T09:18:43.000Z:
Fixes #4774 Reorganized logging class to ease further modifications- Revision 77cb53d3 by Côme Chilliet on 2016-06-02T12:01:46.000Z:
Fixes #4774 Added code for logging into LDAP when audit plugin is installed- Revision 9def2ce2 by Côme Chilliet on 2016-06-02T12:02:41.000Z:
Fixes #4774 Added code for logging into LDAP when audit plugin is installed- Revision 199f1cd2 by Benoit MORTIER on 2016-06-02T16:02:17.000Z:
Fixes #4774 Added code for logging into LDAP when audit plugin is installed
removed leftover in html/index.php
Signed-off-by: Mortier Benoit <benoit.mortier@opensides.be>- Revision 37ce57b1 by Benoit MORTIER on 2016-06-02T16:06:14.000Z:
Fixes #4774 Added code for logging into LDAP when audit plugin is installed
Changed doxygen comment
Signed-off-by: Mortier Benoit <benoit.mortier@opensides.be>- Revision e559f817 by Côme Chilliet on 2016-06-03T04:57:21.000Z:
Fixes #4774 Replaced a few last occurences of log class name- Revision f3dadaaa by Côme Chilliet on 2016-06-03T06:56:51.000Z:
Fixes #4774 Fixed objectType name + avoid infinite looping- Revision 5ae87ccc by Côme Chilliet on 2016-06-03T06:57:28.000Z:
Fixes #4774 Fixed objectType name + avoid infinite looping- Revision 7b12deab by Côme Chilliet on 2016-06-03T08:54:26.000Z:
Fixes #4774 new try at fixing audit event logging- Revision f31a473a by Côme Chilliet on 2016-06-03T08:55:05.000Z:
Fixes #4774 new try at fixing audit event logging- Revision a2446fe9 by Benoit MORTIER on 2016-06-06T05:02:02.000Z:
Fixes #4774 Added code for logging into LDAP when audit plugin is installed
removed leftover in html/index.php
Signed-off-by: Mortier Benoit <benoit.mortier@opensides.be>- Revision d7f5bd03 by Benoit MORTIER on 2016-06-06T05:02:45.000Z:
Fixes #4774 Added code for logging into LDAP when audit plugin is installed
Changed doxygen comment
Signed-off-by: Mortier Benoit <benoit.mortier@opensides.be>- Revision 02099a45 by Côme Chilliet on 2016-06-06T05:09:57.000Z:
Fixes #4774 Replaced a few last occurences of log class name- Custom Fields:
- Bug in version: 1.0.12
Activity
hello,
when editing a user i got this crash
Fatal error: Uncaught exception 'NonExistingObjectTypeException' with message 'Non-existing type "auditAction"' in /usr/share/fusiondirectory/include/class_objects.inc:214 Stack trace: #0 /usr/share/fusiondirectory/include/class_objects.inc(151): objects::infos('auditAction') #1 /usr/share/fusiondirectory/include/class_objects.inc(206): objects::open('new', 'auditAction') #2 /usr/share/fusiondirectory/include/class_logging.inc(135): objects::create('auditAction') #3 /usr/share/fusiondirectory/include/class_logging.inc(86): logging::log_into_ldap(Array) #4 /usr/share/fusiondirectory/include/simpleplugin/class_simplePlugin.inc(688): logging::log('modify', 'plugin/user', 'uid=user,ou=peo...', Array, 'Success') #5 /usr/share/fusiondirectory/include/simpleplugin/class_simplePlugin.inc(622): simplePlugin->post_save() #6 /usr/share/fusiondirectory/plugins/personal/generic/class_user.inc(532): simplePlugin->save() #7 /usr/share/fusiondirectory/include/simpleplugin/class_simpleTabs.inc(417): user->save() #8 /usr/share/fusiondirect in /usr/share/fusiondirectory/include/class_objects.inc on line 214
Cheers
(from redmine: written on 2016-06-03)
By bmortier on 2017-09-02T15:28:49 (imported from GitLab)
hello,
Array ( [timestamp] => 1431970366 [action] => modify [objecttype] => plugin/user [object] => uid=user,ou=people,dc=fusiondirectory,dc=org [changes] => Array ( ) [result] => Success [user] => uid=admin,ou=people,dc=fusiondirectory,dc=org ) Array ( [timestamp] => 1431970366 [action] => modify [objecttype] => plugin/userRoles [object] => uid=user,ou=people,dc=fusiondirectory,dc=org [changes] => Array ( ) [result] => Success [user] => uid=admin,ou=people,dc=fusiondirectory,dc=org )
(from redmine: written on 2016-06-03)
By bmortier on 2017-09-02T15:28:50 (imported from GitLab)
hello,
LDAP operation failed!
Object: fdAuditDateTime=18.05.2015,
Error: Invalid DN syntax (invalid DN, while operating on 'fdAuditDateTime=18.05.2015,' using LDAP server 'ldap://demo-fixes.fusiondirectory.org')
(from redmine: written on 2016-06-03)
By bmortier on 2017-09-02T15:28:50 (imported from GitLab)
hello,
LDAP operation failed!
Object: fdAuditDateTime=20160603090959Z,ou=audit,dc=fusiondirectory,dc=org
Error: Undefined attribute type - attribute: base (base: attribute type undefined, while operating on 'fdAuditDateTime=20160603090959Z,ou=audit,dc=fusiondirectory,dc=org' using LDAP server 'ldap://demo-fixes.fusiondirectory.org')
(from redmine: written on 2016-06-03)
By bmortier on 2017-09-02T15:28:50 (imported from GitLab)
This should be fixed now. Maybe we should remove the base from the dns in the list to gain some space? When displaying an entry I intended to show a link to the author instead of its dn, what do you think?
(from redmine: written on 2016-06-06)
By Côme Chilliet on 2017-09-02T15:28:51 (imported from GitLab)
hello,
in the configuration backend part of the audi plugin, we should add a filed to say how much data we keep.
Days to keep 120
this attribute can then be used by the script to calculate the amount of data to keep in the audit branch, and erase older entries
example: audit is from 1 sept to 1 dec and day to keep is a 30, the script should delete 30 days starting 1 sept
Cheers
(from redmine: written on 2016-06-08)
By bmortier on 2017-09-02T15:28:52 (imported from GitLab)
Hello,
when playing with the plugin i found an error in the date showed inside FusionDirectory
date on the system
vendredi 10 juin 2016, 12:43:11 (UTC+0200)
date showed on FD
2016-06-10, 06:43:02
date inside the ldap
28 fdAuditDateTime=20160610104302Z,ou=audit,dc=fusiondirectory,dc=org objectClass: fdAuditEvent fdAuditDateTime: 20160610104302Z fdAuditAction: modify fdAuditAuthorDN: uid=admin,ou=people,dc=fusiondirectory,dc=org fdAuditObjectType: plugin/user fdAuditObject: uid=user,ou=people,dc=fusiondirectory,dc=org fdAuditAttributes: departmentNumber fdAuditResult: Success
29 fdAuditAction=modify+fdAuditDateTime=20160610104302Z,ou=audit,dc=fusiondirectory,dc=org objectClass: fdAuditEvent fdAuditDateTime: 20160610104302Z fdAuditAction: modify fdAuditAuthorDN: uid=admin,ou=people,dc=fusiondirectory,dc=org fdAuditObjectType: plugin/userRoles fdAuditObject: uid=user,ou=people,dc=fusiondirectory,dc=org fdAuditResult: Success
Cheers
(from redmine: written on 2016-06-10)
By bmortier on 2017-09-02T15:28:53 (imported from GitLab)
added Added label
By bmortier on 2018-10-04T19:25:44 (imported from GitLab)
