I decided to write into new table the login authentication and which service did the authentication.
Which bean I should inject into my class that contains the target service address? (not the authenticating client ip) Thanks. From: Idan Fridman [mailto:[email protected]] Sent: Thursday, May 15, 2014 5:29 PM To: [email protected] Subject: Re: [cas-user] Determine Service name via Audit trail Yes i tried to debug this one. The code never get there. ----- Reply message ----- From: "Jérôme LELEU" <[email protected]<mailto:[email protected]>> To: "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: [cas-user] Determine Service name via Audit trail Date: Thu, May 15, 2014 5:03 PM Hi, It's the first I see more than one audit trail manager, though it seems feasible in the AuditTrailManagementAspect. I see a loop through all the managers in this aspect. Did you try some debugging (I don't see any logs)? Best regards, Jérôme 2014-05-15 15:05 GMT+02:00 Idan Fridman <[email protected]<mailto:[email protected]>>: I understood. Could you explain point 1? Why I had to add MyAuditTrailManager to auditTrailContext.xml while it the auditTrailer bean is completely ignore at deployerContext.xml? Thanks. From: Jérôme LELEU [mailto:[email protected]<mailto:[email protected]>] Sent: Thursday, May 15, 2014 3:37 PM To: [email protected]<mailto:[email protected]> Subject: Re: [cas-user] Determine Service name via Audit trail Hi, You should certainly override or recreate the way things are saved to database to add the name of the service: https://github.com/dima767/inspektr/blob/master/inspektr-support-spring/src/main/java/com/github/inspektr/audit/support/JdbcAuditTrailManager.java#L153 in your new audit trail manager. Best regards, Jérôme 2014-05-15 14:21 GMT+02:00 Idan Fridman <[email protected]<mailto:[email protected]>>: Hi Jerome, I get your direction. But still some holes I find hard to understand. 1. I had to modify auditTrailContext.xml (and not the reference bean at the deployConfigContext): <!-- List<AuditTrailManager> auditTrailManagers --> <constructor-arg index="2"> <list> <bean class="com.github.inspektr.audit.support.ConsoleAuditTrailManager" /> <bean class="org.jasig.cas.audit.MyAuditTrailManager" /> <ref local="auditManager" /> </list> </constructor-arg> Hope that make sense? 2. After I injected the ServicesManager and extract the service name (via the service ip) I want to log it to the current com_audit_trail and not creating new table just for that. 3. Any idea how to integrate this within the current auditing mechanism ? I created new column serviceName. But how I actually log that name together with current auditing data Thanks. From: Jérôme LELEU [mailto:[email protected]<mailto:[email protected]>] Sent: Thursday, May 15, 2014 2:25 PM To: [email protected]<mailto:[email protected]> Subject: Re: [cas-user] Determine Service name via Audit trail Hi, 1) In the deployerConfigContext.xml, you reference an audit trail class: https://github.com/Jasig/cas/blob/master/cas-server-webapp/src/main/webapp/WEB-INF/deployerConfigContext.xml#L180. You would need to create your own. 2) Programmatically yes by using the ServicesManager class injected in your new MyAuditTrailManager. Best regards, Jérôme 2014-05-15 13:17 GMT+02:00 Idan Fridman <[email protected]<mailto:[email protected]>>: Hi Jerome, 1. Which Audit class? 2. How do you query the services manager? Programmatically? From: Jérôme LELEU [mailto:[email protected]<mailto:[email protected]>] Sent: Thursday, May 15, 2014 2:16 PM To: [email protected]<mailto:[email protected]> Subject: Re: [cas-user] Determine Service name via Audit trail Hi, I think you just have the service url in the audit class. So you would need to query the services manager with this service url to get the matching service to finally get its name. Best regards, Jérôme 2014-05-15 10:10 GMT+02:00 ray <[email protected]<mailto:[email protected]>>: Wonder if anyone had a chance to have any idea at this one? Thanks, ray. -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user This e-mail and the information it contains may be privileged and/or confidential. It is intended solely for the use of the named recipient(s). If you are not the intended recipient you may not disclose, copy, distribute or retain any part of this message or attachments. If you have received this e-mail in error please notify the sender immediately [by clicking 'Reply'] and delete this e-mail. -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user This e-mail and the information it contains may be privileged and/or confidential. It is intended solely for the use of the named recipient(s). If you are not the intended recipient you may not disclose, copy, distribute or retain any part of this message or attachments. If you have received this e-mail in error please notify the sender immediately [by clicking 'Reply'] and delete this e-mail. -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user This e-mail and the information it contains may be privileged and/or confidential. It is intended solely for the use of the named recipient(s). If you are not the intended recipient you may not disclose, copy, distribute or retain any part of this message or attachments. If you have received this e-mail in error please notify the sender immediately [by clicking 'Reply'] and delete this e-mail. -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user This e-mail and the information it contains may be privileged and/or confidential. It is intended solely for the use of the named recipient(s). If you are not the intended recipient you may not disclose, copy, distribute or retain any part of this message or attachments. If you have received this e-mail in error please notify the sender immediately [by clicking 'Reply'] and delete this e-mail. -- You are currently subscribed to [email protected]<mailto:[email protected]> as: [email protected]<mailto:[email protected]> To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user This e-mail and the information it contains may be privileged and/or confidential. It is intended solely for the use of the named recipient(s). If you are not the intended recipient you may not disclose, copy, distribute or retain any part of this message or attachments. If you have received this e-mail in error please notify the sender immediately [by clicking 'Reply'] and delete this e-mail. This e-mail and the information it contains may be privileged and/or confidential. It is intended solely for the use of the named recipient(s). If you are not the intended recipient you may not disclose, copy, distribute or retain any part of this message or attachments. If you have received this e-mail in error please notify the sender immediately [by clicking 'Reply'] and delete this e-mail. -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
