Anonymous_User Absent Member.
Absent Member.
134 views

eDirectory events - null values


Most of the events for eDirectory return null values, for example:
Message: Query Account: Account <null> queried by <null> in context
<null>

Is that something that will be a function of identity tracking module or
some changes in eDirectory are needed?

Many thanks,


--
malkorkslx
------------------------------------------------------------------------
malkorkslx's Profile: https://forums.netiq.com/member.php?userid=2711
View this thread: https://forums.netiq.com/showthread.php?t=47794

0 Likes
3 Replies
Anonymous_User Absent Member.
Absent Member.

Re: eDirectory events - null values

A few more details may help with this. For example, which version of
eDirectory, and what was the event? Which version of Sentinel, and of the
eDir collector? Are you sending events via the Audit Connector or
something else? Do you have a connector dump of something similar to
replay in another environment?

Good luck.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: eDirectory events - null values


thanks,

eDirectory 8.8 sp7
sentinel 7.03
collector: Novell eDirectory 2011.1r1
sending via syslog - xdasaudit events

All of the events always show

Message: Authenticate Session: User <null> logged in from <null> to
server <null>
Message: Create Session: Session created by <null> for <null> in context
<null>

for all 4 servers.

any suggestions welcome, cheers


--
malkorkslx
------------------------------------------------------------------------
malkorkslx's Profile: https://forums.netiq.com/member.php?userid=2711
View this thread: https://forums.netiq.com/showthread.php?t=47794

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: eDirectory events - null values

Well, I must admit I have not done testing w/XDAS events yet. Any reason
you're using those over the Audit-style events?

Good luck.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.