iliadmin1 Absent Member.
Absent Member.
429 views

WebAccess Log Info Entries without username

I am looking at my webaccess log and I am seeing for the first time many of these types of entries in the log:

11:37:09, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:11, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:11, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:13, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:13, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:14, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:14, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:14, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:16, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:17, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search for contacts
11:37:22, <SOAP>, -, INFO, <username redacted> Streamed an attachment
11:37:22, <SOAP>, -, INFO, <username redacted> Sent a message to: <redacted email addr>
11:37:23, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Folder List
11:37:23, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Message List
11:37:23, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Message List
11:37:23, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Folder List
11:37:23, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Message List
11:37:23, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Folder List
11:37:23, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Folder List
11:37:34, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Get Folder List
11:37:36, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Read a Message

15:58:13, <SOAP>, -, INFO, 93CF5580-101B-0000-96C8-EDFC2C30CC81, Get Folder List
15:58:13, <SOAP>, -, INFO, 93CF5580-101B-0000-96C8-EDFC2C30CC81, Get Folder List
15:59:15, <SOAP>, -, INFO, 93CF5580-101B-0000-96C8-EDFC2C30CC81, Get Folder List
15:59:15, <SOAP>, -, INFO, 93CF5580-101B-0000-96C8-EDFC2C30CC81, Get Folder List

Also what does this next message mean..I am going to guess that the above messages and this one are related?:

8:10:18, <SOAP>, -, INFO, <username redacted> Retrieve proxy list history

I do only see this with one user, who is traveling and accessing our portal from the West coast, likely from a hotel. Is this the
hotel proxy being identified? I've never seen this in my logs before.

Kind regards,

Val

GW 2018 & Mobility Service-Version: 18.1.0 Build: 410 on SLES 12SP3, GW Client 18.02 (Build 131493) on Windows 7 64bit; server OES 11 on SLES 11 SP3; eDirectory 9.1 on SLES12SP3 and eDirectory 8.8sp8 on SLES11 SP3
Labels (1)
0 Likes
2 Replies
AutomaticReply Absent Member.
Absent Member.

Re: WebAccess Log Info Entries without username

iliadmin,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

These forums are peer-to-peer, best effort, volunteer run and that if your issue
is urgent or not getting a response, you might try one of the following options:

- Visit https://www.microfocus.com/support-and-services and search the knowledgebase and/or check
all the other self support options and support programs available.
- Open a service request: https://www.microfocus.com/support
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.microfocus.com)
- You might consider hiring a local partner to assist you.
https://www.partnernetprogram.com/partnerfinder/find.html

Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.microfocus.com/faq.php

Sometimes this automatic posting will alert someone that can respond.

If this is a reply to a duplicate posting or otherwise posted in error, please
ignore and accept our apologies and rest assured we will issue a stern reprimand
to our posting bot.

Good luck!

Your Micro Focus Forums Team
http://forums.microfocus.com



0 Likes
Knowledge Partner
Knowledge Partner

Re: WebAccess Log Info Entries without username

In article <iliadmin.8x7khb@no-mx.forums.microfocus.com>, Iliadmin wrote:
> I am looking at my webaccess log and I am seeing for the first time many
> of these types of entries in the log:
>
> 11:37:09, <SOAP>, -, INFO, 8D563380-09B4-0000-BC17-9DEF25317322, Search
> for contacts
> ....
> 15:59:15, <SOAP>, -, INFO, 93CF5580-101B-0000-96C8-EDFC2C30CC81, Get
> Folder List


Interesting. That looks like some sort of guid where the username usually
goes. Have you had the chance to apply the new SP that has come out
since you posted this? It would be interesting to see if that fixes this.

A test would be to log into Webaccess and do a few things when nobody else
is using it and see how much tags with the ID you log in with verses that
guid like thing. I don't have an GW 18 system to poke at right now, but
would like to hear from any others with GW 18.1 systems if they see the
same thing.


> Also what does this next message mean..I am going to guess that the
> above messages and this one are related?:
>
> 8:10:18, <SOAP>, -, INFO, <username redacted> Retrieve proxy list
> history

it means that this user did do something that worked with their GroupWise
proxy, i.e. What other accounts they can proxy into. Such access to
proxy to other GW accounts is quite new to WebAccess.

I like how you have your versions in your sig. Very useful for us helping
you, so do keep it up to date. Pity our new home in a couple months
doesn't leave them statically as per time of post but updates all views as
you update your sig.



Andy of
http://KonecnyConsulting.ca/gw in Toronto
Knowledge Partner
https://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

___
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.