This page (revision-13) was last changed on 29-Nov-2024 16:16 by -jim

This page was created on 29-Nov-2024 16:16 by unknown

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note
13 29-Nov-2024 16:16 6 KB -jim to previous
12 29-Nov-2024 16:16 5 KB -jim to previous | to last
11 29-Nov-2024 16:16 7 KB -jim to previous | to last
10 29-Nov-2024 16:16 3 KB -jim to previous | to last
9 29-Nov-2024 16:16 3 KB -jim to previous | to last
8 29-Nov-2024 16:16 3 KB -jim to previous | to last
7 29-Nov-2024 16:16 2 KB -jim to previous | to last
6 29-Nov-2024 16:16 2 KB -jim to previous | to last
5 29-Nov-2024 16:16 3 KB -jim to previous | to last
4 29-Nov-2024 16:16 3 KB -jim to previous | to last
3 29-Nov-2024 16:16 3 KB -jim to previous | to last
2 29-Nov-2024 16:16 2 KB -jim to previous | to last
1 29-Nov-2024 16:16 3 KB unknown to last

Page References

Incoming links Outgoing links
EDirectory Common Event Format
EDirectory Common Event Format

Version management

Difference between version and

At line 2 changed one line
[{$pagename}] [eDirectory] moved from [XDAS] to using the [Common Event Format] ([CEF]) when [Micro Focus] acquired [ArcSight]
[{$pagename}]
At line 4 removed one line
From [Novell Audit] to [XDAS] to [Common Event Format] along with legacy [X.500], [X-NDS_NAMING] and [LDAP] operations the terms have become complex. [{$applicationname}] attempts to find the common context for the names.
At line 6 changed one line
The values were obtained from empirical [evidence] at Large Organization.
[eDirectory] moved from [XDAS] to using the [Common Event Format] ([CEF]) when [Micro Focus] acquired [ArcSight]
At line 8 changed 3 lines
%%warning
Although believed to be accurate [{$applicationname}] could not verify from [Micro Focus] documentation.
%%
These values were obtained from empirical evidence and although believed to be accurate [{$applicationname}] could not verify from [Micro Focus] documentation.
At line 12 changed 2 lines
%%table-bordered
%%table-striped
%%zebra-table
%%sortable
At line 15 changed 84 lines
%%table-sort
|| [Classification] || Operation || [CEF|Common Event Format] CODE || [eDirectory] Operation
| Security| CONNECTION | CEF0B035E | DSE_CONNECTION
| Security | LOGIN | CEF0B035C | DSE_LOGIN_EX
| Security | LOGIN | - | DSE_NMAS_LOG_SRVR_BEGIN_LOGIN
| Security | LOGIN | - | DSE_NMAS_LOG_FINISH_LOGIN_STATUS
| Security | LOGIN | - | DSE_NMAS_LOG_SASL_MECHANISM_RESULT
| Security | LOGOUT | CEF0B0303 | DSE_LOGOUT
| Security | ADD_MEMBER | CEF0B0336 | [DSE_ADD_VALUE|Add Modification-type]
| Security | DELETE_MEMBER |CEF0B0337 | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | INTRUDER_DETECTED | CEF0B0357 | [DSE_ADD_VALUE|Add Modification-type]
| Security | ACCOUNT_UNLOCK | CEF0B035F | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | LOGIN_DISABLED | CEF0B0356 | [DSE_ADD_VALUE|Add Modification-type]
| Security | LOGIN_ENABLED | CEF0B0355 | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | ACL_CHANGED | CEF0B0354 | [DSE_ADD_VALUE|Add Modification-type]
| Security | ACL_CHANGED | - | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | CHANGE_SECURITY_EQUALS | CEF0B0341 | [DSE_ADD_VALUE|Add Modification-type]
| Security | CHANGE_SECURITY_EQUALS | - | DSE_DELETE_VALUE
| Security | VERIFY_PASSWORD | CEF0B030E | DSE_VERIFY_PASS
| Security | AUDIT_CONFIG | CEF0B0006 | [DSE_ADD_VALUE|Add Modification-type]
| Security | AUDIT_CONFIG | - | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | CHANGE_PASSWORD | CEF0290064 | DSE_CHGPASS
| Security | CHANGE_PASSWORD | CEF0B0302 | DSE_NMAS_LOG_SET_PWD
| Security | CHANGE_PASSWORD | CEF029006A | DSE_NMAS_LOG_SET_DIST_PWD
| Security | CHANGE_PASSWORD | - | DSDSE_NMAS_LOG_DELETE_PWD
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_DELETE_DIST_PWD
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_CHANGE_PWD
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_DELETE_ALL_LOGIN_SECRET
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_SET_LOGIN_SECRET
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_DELETE_LOGIN_SECRET
| Security | CHANGE_LOGIN_CONFIG | CEF0290061 | DSE_NMAS_LOG_SET_LOGIN_CONFIG
| Security | CHANGE_LOGIN_CONFIG | - | DSE_NMAS_LOG_DELETE_LOGIN_CONFIG
| Security | CHANGE_LOGIN_CONFIG | - | DSE_NMAS_LOG_DELETE_ALL_LOGIN_CONFIG
| Security | QUERY_CREDENTIALS | CEF0290062 | DSE_NMAS_LOG_GET_PWD_HISTORY
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_PWD
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_LOGIN_CONFIG
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_CHECK_PWD_SYNTAX_POLICY
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_ALL_LOGIN_SECRET
| Security | QUERY_CREDENTIALS | CEF0290068 | DSE_NMAS_LOG_GET_PWD_STATUS
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_ALL_LOGIN_CONFIG
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_DIST_PWD
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_PWD_HISTOR
| Security | IMPERSONATE | CEF0B0231 | DSE_IMPERSONATE
| Security | AUTHENTICATE | CEF0B035D | DSE_AUTHENTICATE
| Objects | CREATE_OBJECT | CEF0B0001 | DSE_CREATE_ENTRY
| Objects | CREATE_OBJECT | - | DSE_ADD_ENTRY
| Objects | DELETE_OBJECT | CEF0B0309 | DSE_REMOVE_ENTRY
| Objects | RENAME_OBJECT | CEF0B0003 | DSE_RENAME_ENTRY
| Objects | MOVE_OBJECT | CEF0B0004 | DSE_MOVE_DEST_ENTRY
| Objects | MOVE_OBJECT | CEF0B0005 | DSE_MOVE_SOURCE_ENTRY
| Objects | DSA_READ | CEF0B0230 | DSE_DSA_READ
| Objects | SEARCH | CEF0B033C | DSE_SEARCH
| Attributes | READ_ATTRIBUTE | CEF0B0323 | DSE_READ_ATTR
| Attributes | DELETE_ATTRIBUTE | CEF0B0009 | DSE_DELETE_ATTRIBUTE
| Attributes | ADD_VALUE | CEF0B0006 | [DSE_ADD_VALUE|Add Modification-type]
| Attributes | DELETE_VALUE | CEF0B0007 | DSE_DELETE_VALUE
| Attributes | COMPARE_ATTRIBUTE_VALUE | | DSE_COMPARE_ATTR_VALUE
| LDAP | LDAP_BIND | CEF0B0401 | [DSE_LDAP_BIND|Bind Request]
| LDAP | LDAP_UNBIND | CEF0B0403 | [DSE_LDAP_UNBIND|Unbind Request]
| LDAP | LDAP_CONNECTION | | DSE_LDAP_CONNECTION
| LDAP | LDAP_SEARCH |. | DSE_LDAP_SEARCH
| LDAP | LDAP_SEARCH_RESPONSE |. | DSE_LDAP_SEARCHRESPONSE
| LDAP | LDAP_SEARCH_ENTRY_RESPONSE |. | DSE_LDAP_SEARCHENTRYRESPONSE
| LDAP | LDAP_ADD | CEF0B0408 | [DSE_LDAP_ADD|Add Request]
| LDAP | LDAP_ADD_RESPONSE |. | DSE_LDAP_ADDRESPONSE
| LDAP | LDAP_COMPARE | CEF0B0410 | [DSE_LDAP_COMPARE|Compare Request]
| LDAP | LDAP_COMPARE_RESPONSE | CEF0B0411 | [DSE_LDAP_COMPARERESPONSE|Compare Response]
| LDAP | LDAP_MODIFY | CEF0B0412 | [DSE_LDAP_MODIFY|Modify Request]
| LDAP | LDAP_MODIFY_RESPONSE | CEF0B0413 | [DSE_LDAP_MODIFYRESPONSE|Modify Response]
| LDAP | LDAP_DELETE | CEF0B0414 | [DSE_LDAP_DELETE|Delete Request]
| LDAP | LDAP_DELETE_RESPONSE | CEF0B0415 | [DSE_LDAP_DELETERESPONSE|Delete Response]
| LDAP | LDAP_MODDN | CEF0B0416 | [DSE_LDAP_MODDN|ModifyDNRequest]
| LDAP | LDAP_MODDN_RESPONSE | CEF0B0417 | [DSE_LDAP_MODDNRESPONSE|Modify DN Response]
| LDAP | LDAP_ABANDON | CEF0B0418 | [DSE_LDAP_ABANDON|Abandon Request]
| LDAP | LDAP_EXTENDED_OPERATION | CEF0B0419 | [DSE_LDAP_EXTOP|Extended Request]
| LDAP | LDAP_EXTENDED_OPERATION_RESPONSE | CEF0B0421 | DSE_LDAP_EXTOP_RESPONSE
| LDAP | LDAP_SYSTEM_EXTENDED_OPERATION |. | DSE_LDAP_SYSEXTOP
| LDAP | LDAP_PASSWORD_MODIFY | CEF0B0424 | DSE_LDAP_PASSWDMODIFY
| LDAP | MODIFY_LDAP_SERVER_CONFIGURATION |. | DSE_LDAP_MODLDAPSERVER
| LDAP | UNKNOWN_LDAP_OPERATION |. | DSE_LDAP_UNKNOWNOP
| LDAP | LDAP_BIND_RESPONSE |. | DSE_LDAP_BINDRESPONSE
| LDAP | LDAP_SEARCH_RESPONSE |. | DSE_LDAP_SEARCHRESPONSE
| LDAP | LDAP_SEARCH_ENTRY_RESPONSE |. | DSE_LDAP_SEARCHENTRYRESPONSE
| LDAP | LDAP_ADD_RESPONSE | CEF0B0409 | [DSE_LDAP_ADDRESPONSE|Add Response]!! More Information
| CEF CODE | eDirectory | Comment
| CEF0290066 | QUERY_CREDENTIALS | If LDAP then Would also probably show as [LDAP_SEARCH|SearchRequest]
| CEF0290068 | QUERY_CREDENTIALS | If LDAP then Would also probably show as [LDAP_SEARCH|SearchRequest]
| CEF029006A | CHANGE_PASSWORD | If LDAP then Would also probably be shows as [LDAP_PASSWORD_MODIFY|Password Change]
| CEF0B0001 | CREATE_OBJECT | If LDAP then Would also probably be shows as [LDAP_ADD|Add Request]
| CEF0B0003 | RENAME_OBJECT | If LDAP then Would also probably be shows as [LDAP_MODDN|ModifyDNRequest]
| CEF0B0006 | ADD_VALUE | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0007 | DELETE_VALUE | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0009 | DELETE_ATTRIBUTE | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0309 | DELETE_OBJECT | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0336 | ADD_MEMBER | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0337 | DELETE_MEMBER | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0354 | ACL_CHANGED | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0355 | LOGIN_ENABLED | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0356 | LOGIN_DISABLED | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0357 | INTRUDER_DETECTED |
| CEF0B035C | LOGIN | If LDAP then Would also probably be shows as [LDAP_BIND|Bind Request]/[LDAP_BIND_RESPONSE|Bind Response]
| CEF0B035D | AUTHENTICATE | If LDAP then Would also probably be shows as [LDAP_BIND|Bind Request]/[LDAP_BIND_RESPONSE|Bind Response]
| CEF0B035F | ACCOUNT_UNLOCK | If LDAP then Would also probably be shows as [LDAP_MODIFY|Modify Request]
| CEF0B0401 | [LDAP_BIND|Bind Request] |
| CEF0B0402 | [LDAP_BIND_RESPONSE|Bind Response] |
| CEF0B0403 | [LDAP_UNBIND|Unbind Request] |
| CEF0B0408 | [LDAP_ADD|Add Request] |
| CEF0B0409 | [LDAP_ADD_RESPONSE|Add Response] |
| CEF0B0412 | [LDAP_MODIFY|Modify Request] |
| CEF0B0413 | [LDAP_MODIFY_RESPONSE|Modify Response] |
| CEF0B0414 | [LDAP_DELETE|Delete Request] |
| CEF0B0415 | [LDAP_DELETE_RESPONSE|Delete Response] |
| CEF0B0416 | [LDAP_MODDN|ModifyDNRequest] |
| CEF0B0417 | [LDAP_MODDN_RESPONSE|Modify DN Response] |
| CEF0B0418 | [LDAP_ABANDON|Abandon Request] |
| CEF0B0424 | [LDAP_PASSWORD_MODIFY|Password Change] |
/%
/%
/%
!! More Information
This page (revision-13) was last changed on 29-Nov-2024 16:16 by -jimTop