IDVault: Wrong requester reported in Security Event

HCL Domino Domino Forum
1

Situation:Administrator/HENSELER tried as vault administrator to extrace ID file from vault.

He does not know the password of the ID, but has no Auditor role, so the download faild.

In the security event log the following entry is made:

ID failed to download by auditor from vault ‘O=HENSELER-IDVault’. ‘Samantha Daryn/SALES/HENSELER’ (IP address 192.168.91.1:3212) made request. Error: You are not authorized to perform that operation

I see the following wrong information in this log entry:

  1. The download was not made by an Auditor, but in Auditor mode (because no password was provided)

  2. The request was made by Administrator/HENSELER and not by Samantha Daryn/SALES/HENSELER

2

Subject: Thanks - that’s fixed in the current build

We’ve improved the logging for the ID vault feature substantially since beta 2, and the logging for the “extract” functionality now reports the identity of the admin performing the action correctly.