Bug 1041875 - [RFE][keystone]: Keystone needs to record audit relevant events for audit trail
Summary: [RFE][keystone]: Keystone needs to record audit relevant events for audit trail
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-keystone
Version: unspecified
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: rc
: 5.0 (RHEL 7)
Assignee: RHOS Maint
QA Contact: Udi Kalifon
URL: https://blueprints.launchpad.net/keys...
Whiteboard: upstream_milestone_icehouse-3 upstrea...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-12 19:50 UTC by RHOS Integration
Modified: 2016-04-26 18:44 UTC (History)
7 users (show)

Fixed In Version: openstack-keystone-2014.1-4.el7ost
Doc Type: Enhancement
Doc Text:
Audits are essential for maintaining security of a system, and especially applicable to Identity since Identity is a security-focused service. OpenStack has adopted CADF as the format for audit events. The Identity service now emits CADF events upon Identity and Token operations.
Clone Of:
Environment:
Last Closed: 2014-07-08 15:24:15 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2014:0854 0 normal SHIPPED_LIVE Red Hat Enterprise Linux OpenStack Platform Enhancement - Identity 2014-07-08 19:22:33 UTC

Description RHOS Integration 2013-12-12 19:50:05 UTC 
Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/audit-event-record.

Description:

Currently in keystone, many audit relevant events are not recorded down, like account management, token management.
The record method could be log, notify or others
The audit event can be also delivered to other projects like ceilometer to be collected and aggregated

Specification URL (additional information):

None
Comment 8 errata-xmlrpc 2014-07-08 15:24:15 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2014-0854.html
Note You need to log in before you can comment on or make changes to this bug.