Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 386 / 564

Chapter 15. Configuring Subsystem Logs
364
The
message
can be a return message from the subsystem or contain values submitted to the
subsystem.
For example, the TKS records this message for connecting to an LDAP server:
[10/Jun/2009:05:14:51][main]: Established LDAP connection using basic authentication to host
localhost port 389 as cn=Directory Manager
The
processor
is
main
, and the
message
is the message from the server about the LDAP connection,
and there is no servlet.
The CA, on the other hand, records information about certificate operations as well as subsystem
connections:
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.requestowner
$ value=RA-server.example.com-4747
In this case, the
processor
is the HTTP protocol over the CA's agent port, while it specifies the servlet
for handling profiles and contains a
message
giving a profile parameter (the subsystem owner of a
request) and its value (that the RA initiated the request).
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.profileapprovedby$ value=admin
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.cert_request
$
value=MIIBozCCAZ8wggEFAgQqTfoHMIHHgAECpQ4wDDEKMAgGA1UEAxMBeKaBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA63rhLAVqvVrmdjGgcLTWMb5Czx3DdHLrGO4MS8wfl8EP1bFhKDmxpXYOlsCTznAXby4iinwutOcBXcp2xICrNHwoVZPR2A4ZifIV
+vj2qrohbTrIWZAnzAW8scKynfMmeRuSPtoBPT1M58SWjB05pTqpuB8Bcc8tEUUCAwEAAakQMA4GA1UdDwEB/
wQEAwIF4DAzMBUGCSsGAQUFBwUBAQwIcmVnVG9rZW4wGgYJKwYBBQUHBQECDA1hdXRoZW50aWNhdG9yoYGTMA0GCSqGSIb3DQEBBQUAA4GBAH8Hg6uvDTVC5pDQtWkB4q2DFhou9pcMp1Ar84OX4d2TMoqCQe423m9PAjTv
+ck/
xW0Nj8H32krmv7DzWzXkLBD2MSMTmxBORX5dCsxkCdiHCEgCfTOnxCJpdmjHPuSPOaQmtKBpAEVaQoUwnEytOqDkCkhlZ1nt02w1
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.profile$
value=true
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.cert_request_type$ value=crmf
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.requestversion$ value=1.0.0
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.req_locale$
value=en
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.requestowner
$ value=RA-server.example.com-4747
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.dbstatus$
value=NOT_UPDATED
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.subject$
value=uid=jsmith, e=jsmith@example.com
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.requeststatus$ value=begin
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.auth_token.user$ value=uid=RA-
server.example.com-4747,ou=People,dc=server.example.com-pki-ca
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=$request.req_key$
value=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDreuEsBWq9WuZ2MaBwtNYxvkLP^M
HcN0cusXwQ/VsWEoObGldg6WwJPOcBdvLiKKfC605wFdynbEgKs0fChV^M
k9HYDPaquiHJSVNhsv5tOshZkCfMBbyxwrKd2gE9PUznxJaM^M
HTmlOqm4HwFxzy0RRQIDAQAB
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.auth_token.authmgrinstname$ value=raCertAuth
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.auth_token.uid$ value=RA-server.example.com-4747
[06/Jun/2009:14:59:38][http-9443-Processor24]: ProfileSubmitServlet: key=
$request.auth_token.userid$ value=RA-server.example.com-4747