Bug 2093981

Summary: RFE - Create Security Audit Log
Product: Red Hat Enterprise Linux 9 Reporter: mreynolds
Component: 389-ds-baseAssignee: mreynolds
Status: CLOSED CURRENTRELEASE QA Contact: LDAP QA Team <idm-ds-qe-bugs>
Severity: unspecified Docs Contact: Evgenia Martynyuk <emartyny>
Priority: unspecified    
Version: 9.1CC: emartyny, gfialova, idm-ds-dev-bugs, pasik, spichugi
Target Milestone: rcKeywords: FutureFeature, Triaged
Target Release: 9.2Flags: emartyny: needinfo-
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: sync-to-jira
Fixed In Version: 389-ds-base-2.2.4-3.el9 Doc Type: Enhancement
Doc Text:
.Directory&nbsp;Server introduces the security log To properly track issues over time, Directory Server now has a specialized log that maintains security data. The security log does not rotate quickly and consumes less disk resources in comparison to the access log that has all the information, but requires expensive parsing to get the security data. The new server log records security events such as authentication events, authorization issues, DoS/TCP attacks, and other events. Directory Server stores the security log in the `/var/log/dirsrv/slapd-__instance_name__/` directory along with other log files.
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-03-23 13:50:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description mreynolds 2022-06-06 13:44:49 UTC
Description of problem:

Create a new server log that records "security" events:

- Authentication attacks
- Authorization issues
- DOS/TCP attacks
- etc


See this design doc for more details:

https://www.port389.org/docs/389ds/design/security-audit-log-design.html

Comment 2 mreynolds 2022-06-06 14:54:28 UTC
Upstream tikcet:

https://github.com/389ds/389-ds-base/issues/5335

Comment 8 Evgenia Martynyuk 2023-05-16 21:40:36 UTC
Reviewed by Viktor, mowing to peer review

Comment 9 Evgenia Martynyuk 2023-05-17 11:33:20 UTC
RN passed peer review and now is release pending