Bug 1041875

Summary:	[RFE][keystone]: Keystone needs to record audit relevant events for audit trail
Product:	Red Hat OpenStack	Reporter:	RHOS Integration <rhos-integ>
Component:	openstack-keystone	Assignee:	RHOS Maint <rhos-maint>
Status:	CLOSED ERRATA	QA Contact:	Udi Kalifon <ukalifon>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	aberezin, ayoung, breeler, markmc, nkinder, ukalifon, yeylon
Target Milestone:	rc	Keywords:	FutureFeature, Triaged
Target Release:	5.0 (RHEL 7)
Hardware:	Unspecified
OS:	Unspecified
URL:	https://blueprints.launchpad.net/keystone/+spec/audit-event-record
Whiteboard:	upstream_milestone_icehouse-3 upstream_status_implemented upstream_definition_new
Fixed In Version:	openstack-keystone-2014.1-4.el7ost	Doc Type:	Enhancement
Doc Text:	Audits are essential for maintaining security of a system, and especially applicable to Identity since Identity is a security-focused service. OpenStack has adopted CADF as the format for audit events. The Identity service now emits CADF events upon Identity and Token operations.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-07-08 15:24:15 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description RHOS Integration 2013-12-12 19:50:05 UTC

Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/audit-event-record.

Description:

Currently in keystone, many audit relevant events are not recorded down, like account management, token management.
The record method could be log, notify or others
The audit event can be also delivered to other projects like ceilometer to be collected and aggregated

Specification URL (additional information):

None

Comment 8 errata-xmlrpc 2014-07-08 15:24:15 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2014-0854.html