Attachment 301547 Details for Bug 441362 – ca debug log while doing a revoke search

ca debug log while doing a revoke search

revoke-search.txt (text/plain), 5.71 KB, created by David Stutzman on 2008-04-07 18:36:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: David Stutzman

Created: 2008-04-07 18:36:21 UTC

Size: 5.71 KB

patch

obsolete

>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet:service() uri = /ca/agent/ca/srchCerts
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet::service() param name='timeLimit' value=''
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet::service() param name='revokeAll' value='(&(certRecordId>=0x1)(certRecordId<=0x1)(certStatus=VALID))'
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet::service() param name='op' value='srchCerts'
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet::service() param name='maxResults' value='10'
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet::service() param name='queryCertFilter' value='(&(certRecordId>=0x1)(certRecordId<=0x1)(certStatus=VALID))'
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet: caSrchCerts start to service.
>[07/Apr/2008:14:34:02][http-9443-Processor23]: IP: 192.168.1.200
>[07/Apr/2008:14:34:02][http-9443-Processor23]: AuthMgrName: certUserDBAuthMgr
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet: retrieving SSL certificate
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet: certUID=CN=LTRA.Stutzman.David.K.1234567890,OU=USA,OU=PKI,OU=DoD,O=U.S. Government,C=US
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CertUserDBAuth: started
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CertUserDBAuth: Retrieving client certificate
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CertUserDBAuth: Got client certificate
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 1
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: Authentication: client certificate found
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 3
>[07/Apr/2008:14:34:02][http-9443-Processor23]: Authentication: mapped certificate to user
>[07/Apr/2008:14:34:02][http-9443-Processor23]: authenticated uid=dstutzman,ou=People,dc=wombat.pki-pki-ca
>[07/Apr/2008:14:34:02][http-9443-Processor23]: SignedAuditEventFactory: create() message=[AuditEvent=AUTH_SUCCESS][SubjectID=dstutzman][Outcome=Success][AuthMgr=certUserDBAuthMgr] authentication success
>
>[07/Apr/2008:14:34:02][http-9443-Processor23]: checkACLS(): ACLEntry expressions= group="Certificate Manager Agents"|| group="Registration Manager Agents"
>[07/Apr/2008:14:34:02][http-9443-Processor23]: evaluating expressions: group="Certificate Manager Agents"|| group="Registration Manager Agents"
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 3
>[07/Apr/2008:14:34:02][http-9443-Processor23]: UGSubsystem.isMemberOf() using new lookup code
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: authorization search base: cn=Certificate Manager Agents,ou=groups,dc=wombat.pki-pki-ca
>[07/Apr/2008:14:34:02][http-9443-Processor23]: authorization search filter: (uniquemember=uid=dstutzman,ou=People,dc=wombat.pki-pki-ca)
>[07/Apr/2008:14:34:02][http-9443-Processor23]: authorization result: true
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 3
>[07/Apr/2008:14:34:02][http-9443-Processor23]: evaluated expression: group="Certificate Manager Agents" to be true
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 3
>[07/Apr/2008:14:34:02][http-9443-Processor23]: UGSubsystem.isMemberOf() using new lookup code
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: authorization search base: cn=Registration Manager Agents,ou=groups,dc=wombat.pki-pki-ca
>[07/Apr/2008:14:34:02][http-9443-Processor23]: authorization search filter: (uniquemember=uid=dstutzman,ou=People,dc=wombat.pki-pki-ca)
>[07/Apr/2008:14:34:02][http-9443-Processor23]: authorization result: false
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 3
>[07/Apr/2008:14:34:02][http-9443-Processor23]: evaluated expression: group="Registration Manager Agents" to be false
>[07/Apr/2008:14:34:02][http-9443-Processor23]: DirAclAuthz: authorization passed
>[07/Apr/2008:14:34:02][http-9443-Processor23]: SignedAuditEventFactory: create() message=[AuditEvent=AUTHZ_SUCCESS][SubjectID=dstutzman][Outcome=Success][aclResource=certServer.ca.certificates][Op=list] authorization success
>
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 3
>[07/Apr/2008:14:34:02][http-9443-Processor23]: SignedAuditEventFactory: create() message=[AuditEvent=ROLE_ASSUME][SubjectID=dstutzman][Outcome=Success][Role=Certificate Manager Agents] assume privileged role
>
>[07/Apr/2008:14:34:02][http-9443-Processor23]: useClientFilter=false
>[07/Apr/2008:14:34:02][http-9443-Processor23]: client queryCertFilter = (&(certRecordId>=0x1)(certRecordId<=0x1)(certStatus=VALID))
>[07/Apr/2008:14:34:02][http-9443-Processor23]: queryCertFilter = (&)
>[07/Apr/2008:14:34:02][http-9443-Processor23]: Resetting timelimit from -1 to 30
>[07/Apr/2008:14:34:02][http-9443-Processor23]: Start searching ... filter=(&) maxreturns=10 timelimit=30
>[07/Apr/2008:14:34:02][http-9443-Processor23]: getConn: mNumConns now 1
>[07/Apr/2008:14:34:02][http-9443-Processor23]: searchCertificateswith time limit filter (&)
>[07/Apr/2008:14:34:02][http-9443-Processor23]: returnConn: mNumConns now 2
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet.java: renderTemplate
>[07/Apr/2008:14:34:02][http-9443-Processor23]: CMSServlet: curDate=Mon Apr 07 14:34:02 EDT 2008 id=caSrchCerts time=53

Actions: View

Attachments on bug 441362: 301547 | 301548