Attachment 301548 Details for Bug 441362 – ca debug log while doing a search

ca debug log while doing a search

search.txt (text/plain), 10.28 KB, created by David Stutzman on 2008-04-07 18:36:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: David Stutzman

Created: 2008-04-07 18:36:52 UTC

Size: 10.28 KB

patch

obsolete

>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet:service() uri = /ca/agent/ca/srchCerts
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validityOp' value='<='
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validNotBeforeInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='certTypeInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='serialTo' value='0x1'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validNotAfterInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='statusInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='profile' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='match' value='partial'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validNotAfterTo' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='SecureEmail' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='SSLServer' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='timeLimit' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='issuedByInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='locality' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='eMail' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='subjectInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='SSLClient' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='SubordinateSSLCA' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='revokedByInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='revokedOnFrom' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='revocationReason' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='issuedOnFrom' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validNotBeforeFrom' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='serialNumberRangeInUse' value='on'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='orgUnit' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='status' value='VALID'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='op' value='srchCerts'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validNotAfterFrom' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='issuedOnInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='userID' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validityLengthInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='maxResults' value='10'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='validNotBeforeTo' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='serialFrom' value='0x1'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='country' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='queryCertFilter' value='(&(certRecordId>=0x1)(certRecordId<=0x1))'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='revokedOnInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='unit' value='2592000000'
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='count' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='basicConstraintsInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='revokedOnTo' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='revokedBy' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='org' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='SubordinateEmailCA' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='issuedBy' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='issuedOnTo' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='revocationReasonInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='profileInUse' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='commonName' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet::service() param name='state' value=''
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet: caSrchCerts start to service.
>[07/Apr/2008:14:35:17][http-9443-Processor24]: IP: 192.168.1.200
>[07/Apr/2008:14:35:17][http-9443-Processor24]: AuthMgrName: certUserDBAuthMgr
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet: retrieving SSL certificate
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet: certUID=CN=LTRA.Stutzman.David.K.1234567890,OU=USA,OU=PKI,OU=DoD,O=U.S. Government,C=US
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CertUserDBAuth: started
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CertUserDBAuth: Retrieving client certificate
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CertUserDBAuth: Got client certificate
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 1
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: Authentication: client certificate found
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 3
>[07/Apr/2008:14:35:17][http-9443-Processor24]: Authentication: mapped certificate to user
>[07/Apr/2008:14:35:17][http-9443-Processor24]: authenticated uid=dstutzman,ou=People,dc=wombat.pki-pki-ca
>[07/Apr/2008:14:35:17][http-9443-Processor24]: SignedAuditEventFactory: create() message=[AuditEvent=AUTH_SUCCESS][SubjectID=dstutzman][Outcome=Success][AuthMgr=certUserDBAuthMgr] authentication success
>
>[07/Apr/2008:14:35:17][http-9443-Processor24]: checkACLS(): ACLEntry expressions= group="Certificate Manager Agents"|| group="Registration Manager Agents"
>[07/Apr/2008:14:35:17][http-9443-Processor24]: evaluating expressions: group="Certificate Manager Agents"|| group="Registration Manager Agents"
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 3
>[07/Apr/2008:14:35:17][http-9443-Processor24]: UGSubsystem.isMemberOf() using new lookup code
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: authorization search base: cn=Certificate Manager Agents,ou=groups,dc=wombat.pki-pki-ca
>[07/Apr/2008:14:35:17][http-9443-Processor24]: authorization search filter: (uniquemember=uid=dstutzman,ou=People,dc=wombat.pki-pki-ca)
>[07/Apr/2008:14:35:17][http-9443-Processor24]: authorization result: true
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 3
>[07/Apr/2008:14:35:17][http-9443-Processor24]: evaluated expression: group="Certificate Manager Agents" to be true
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 3
>[07/Apr/2008:14:35:17][http-9443-Processor24]: UGSubsystem.isMemberOf() using new lookup code
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: authorization search base: cn=Registration Manager Agents,ou=groups,dc=wombat.pki-pki-ca
>[07/Apr/2008:14:35:17][http-9443-Processor24]: authorization search filter: (uniquemember=uid=dstutzman,ou=People,dc=wombat.pki-pki-ca)
>[07/Apr/2008:14:35:17][http-9443-Processor24]: authorization result: false
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 3
>[07/Apr/2008:14:35:17][http-9443-Processor24]: evaluated expression: group="Registration Manager Agents" to be false
>[07/Apr/2008:14:35:17][http-9443-Processor24]: DirAclAuthz: authorization passed
>[07/Apr/2008:14:35:17][http-9443-Processor24]: SignedAuditEventFactory: create() message=[AuditEvent=AUTHZ_SUCCESS][SubjectID=dstutzman][Outcome=Success][aclResource=certServer.ca.certificates][Op=list] authorization success
>
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 3
>[07/Apr/2008:14:35:17][http-9443-Processor24]: SignedAuditEventFactory: create() message=[AuditEvent=ROLE_ASSUME][SubjectID=dstutzman][Outcome=Success][Role=Certificate Manager Agents] assume privileged role
>
>[07/Apr/2008:14:35:17][http-9443-Processor24]: useClientFilter=false
>[07/Apr/2008:14:35:17][http-9443-Processor24]: client queryCertFilter = (&(certRecordId>=0x1)(certRecordId<=0x1))
>[07/Apr/2008:14:35:17][http-9443-Processor24]: queryCertFilter = (&(certRecordId>=0x1)(certRecordId<=0x1))
>[07/Apr/2008:14:35:17][http-9443-Processor24]: Resetting timelimit from -1 to 30
>[07/Apr/2008:14:35:17][http-9443-Processor24]: Start searching ... filter=(&(certRecordId>=0x1)(certRecordId<=0x1)) maxreturns=10 timelimit=30
>[07/Apr/2008:14:35:17][http-9443-Processor24]: getConn: mNumConns now 1
>[07/Apr/2008:14:35:17][http-9443-Processor24]: searchCertificateswith time limit filter (&(certRecordId>=0x1)(certRecordId<=0x1))
>[07/Apr/2008:14:35:17][http-9443-Processor24]: returnConn: mNumConns now 2
>[07/Apr/2008:14:35:17][http-9443-Processor24]: CMSServlet: curDate=Mon Apr 07 14:35:17 EDT 2008 id=caSrchCerts time=65

Actions: View

Attachments on bug 441362: 301547 | 301548