AUTHZ_FAIL Audit Event

Overview

The AUTHZ_FAIL audit event is generated when authorization has failed.

Properties:

• Outcome must be Failure for this event

• aclResource must be the ACL resource ID as defined in ACL resource list

• Op must be one of the operations as defined with the ACL statement, e.g. read for an ACL statement containing (read,write)

Note: In PKI 10.5 this event is renamed to AUTHZ.

Examples

Execute the following command:

$ pki -n caadmin ca-audit-file-find

The server will generate the following events:

[AuditEvent=AUTHZ_FAIL][SubjectID=caadmin][Outcome=Failure][aclResource=certServ
er.log.content.signedAudit][Op=read][Info=Authorization Error] authorization fai
lure