This page (revision-13) was last changed on 29-Nov-2024 16:16 by -jim

This page was created on 29-Nov-2024 16:16 by unknown

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note
13 29-Nov-2024 16:16 6 KB -jim to previous
12 29-Nov-2024 16:16 5 KB -jim to previous | to last
11 29-Nov-2024 16:16 7 KB -jim to previous | to last
10 29-Nov-2024 16:16 3 KB -jim to previous | to last
9 29-Nov-2024 16:16 3 KB -jim to previous | to last
8 29-Nov-2024 16:16 3 KB -jim to previous | to last
7 29-Nov-2024 16:16 2 KB -jim to previous | to last
6 29-Nov-2024 16:16 2 KB -jim to previous | to last
5 29-Nov-2024 16:16 3 KB -jim to previous | to last
4 29-Nov-2024 16:16 3 KB -jim to previous | to last
3 29-Nov-2024 16:16 3 KB -jim to previous | to last
2 29-Nov-2024 16:16 2 KB -jim to previous | to last
1 29-Nov-2024 16:16 3 KB unknown to last

Page References

Incoming links Outgoing links
EDirectory Common Event Format
EDirectory Common Event Format

Version management

Difference between version and

At line 2 changed one line
[{$pagename}] [eDirectory] moved from [XDAS] to using the [Common Event Format] ([CEF]) when [Micro Focus] acquired [ArcSight]
[{$pagename}]
At line 4 removed one line
From [Novell Audit] to [XDAS] to [Common Event Format] along with legacy [X.500], [X-NDS_NAMING] and [LDAP] operations the terms have become complex. [{$applicationname}] attempts to find the common context for the names.
At line 6 changed one line
The values were obtained from empirical [evidence] at Large Organization.
[eDirectory] moved from [XDAS] to using the [Common Event Format] ([CEF]) when [Micro Focus] acquired [ArcSight]
At line 8 changed one line
%%warning
These values were obtained from empirical [evidence] at Large Organization.
_%%warning
At line 16 changed 83 lines
|| [Classification] || Operation || [CEF|Common Event Format] CODE || [eDirectory] Operation
| Security| CONNECTION | CEF0B035E | DSE_CONNECTION
| Security | LOGIN | CEF0B035C | DSE_LOGIN_EX
| Security | LOGIN | - | DSE_NMAS_LOG_SRVR_BEGIN_LOGIN
| Security | LOGIN | - | DSE_NMAS_LOG_FINISH_LOGIN_STATUS
| Security | LOGIN | - | DSE_NMAS_LOG_SASL_MECHANISM_RESULT
| Security | LOGOUT | CEF0B0303 | DSE_LOGOUT
| Security | ADD_MEMBER | CEF0B0336 | [DSE_ADD_VALUE|Add Modification-type]
| Security | DELETE_MEMBER |CEF0B0337 | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | INTRUDER_DETECTED | CEF0B0357 | [DSE_ADD_VALUE|Add Modification-type]
| Security | ACCOUNT_UNLOCK | CEF0B035F | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | LOGIN_DISABLED | CEF0B0356 | [DSE_ADD_VALUE|Add Modification-type]
| Security | LOGIN_ENABLED | CEF0B0355 | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | ACL_CHANGED | CEF0B0354 | [DSE_ADD_VALUE|Add Modification-type]
| Security | ACL_CHANGED | - | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | CHANGE_SECURITY_EQUALS | CEF0B0341 | [DSE_ADD_VALUE|Add Modification-type]
| Security | CHANGE_SECURITY_EQUALS | - | DSE_DELETE_VALUE
| Security | VERIFY_PASSWORD | CEF0B030E | DSE_VERIFY_PASS
| Security | AUDIT_CONFIG | CEF0B0006 | [DSE_ADD_VALUE|Add Modification-type]
| Security | AUDIT_CONFIG | - | [DSE_DELETE_VALUE|Delete Modification-type]
| Security | CHANGE_PASSWORD | CEF0290064 | DSE_CHGPASS
| Security | CHANGE_PASSWORD | CEF0B0302 | DSE_NMAS_LOG_SET_PWD
| Security | CHANGE_PASSWORD | CEF029006A | DSE_NMAS_LOG_SET_DIST_PWD
| Security | CHANGE_PASSWORD | - | DSDSE_NMAS_LOG_DELETE_PWD
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_DELETE_DIST_PWD
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_CHANGE_PWD
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_DELETE_ALL_LOGIN_SECRET
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_SET_LOGIN_SECRET
| Security | CHANGE_PASSWORD | - | DSE_NMAS_LOG_DELETE_LOGIN_SECRET
| Security | CHANGE_LOGIN_CONFIG | CEF0290061 | DSE_NMAS_LOG_SET_LOGIN_CONFIG
| Security | CHANGE_LOGIN_CONFIG | - | DSE_NMAS_LOG_DELETE_LOGIN_CONFIG
| Security | CHANGE_LOGIN_CONFIG | - | DSE_NMAS_LOG_DELETE_ALL_LOGIN_CONFIG
| Security | QUERY_CREDENTIALS | CEF0290062 | DSE_NMAS_LOG_GET_PWD_HISTORY
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_PWD
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_LOGIN_CONFIG
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_CHECK_PWD_SYNTAX_POLICY
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_ALL_LOGIN_SECRET
| Security | QUERY_CREDENTIALS | CEF0290068 | DSE_NMAS_LOG_GET_PWD_STATUS
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_ALL_LOGIN_CONFIG
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_DIST_PWD
| Security | QUERY_CREDENTIALS | - | DSE_NMAS_LOG_GET_PWD_HISTOR
| Security | IMPERSONATE | CEF0B0231 | DSE_IMPERSONATE
| Security | AUTHENTICATE | CEF0B035D | DSE_AUTHENTICATE
| Objects | CREATE_OBJECT | CEF0B0001 | DSE_CREATE_ENTRY
| Objects | CREATE_OBJECT | - | DSE_ADD_ENTRY
| Objects | DELETE_OBJECT | CEF0B0309 | DSE_REMOVE_ENTRY
| Objects | RENAME_OBJECT | CEF0B0003 | DSE_RENAME_ENTRY
| Objects | MOVE_OBJECT | CEF0B0004 | DSE_MOVE_DEST_ENTRY
| Objects | MOVE_OBJECT | CEF0B0005 | DSE_MOVE_SOURCE_ENTRY
| Objects | DSA_READ | CEF0B0230 | DSE_DSA_READ
| Objects | SEARCH | CEF0B033C | DSE_SEARCH
| Attributes | READ_ATTRIBUTE | CEF0B0323 | DSE_READ_ATTR
| Attributes | DELETE_ATTRIBUTE | CEF0B0009 | DSE_DELETE_ATTRIBUTE
| Attributes | ADD_VALUE | CEF0B0006 | [DSE_ADD_VALUE|Add Modification-type]
| Attributes | DELETE_VALUE | CEF0B0007 | DSE_DELETE_VALUE
| Attributes | COMPARE_ATTRIBUTE_VALUE | | DSE_COMPARE_ATTR_VALUE
| LDAP | LDAP_BIND | CEF0B0401 | [DSE_LDAP_BIND|Bind Request]
| LDAP | LDAP_UNBIND | CEF0B0403 | [DSE_LDAP_UNBIND|Unbind Request]
| LDAP | LDAP_CONNECTION | | DSE_LDAP_CONNECTION
| LDAP | LDAP_SEARCH |. | DSE_LDAP_SEARCH
| LDAP | LDAP_SEARCH_RESPONSE |. | DSE_LDAP_SEARCHRESPONSE
| LDAP | LDAP_SEARCH_ENTRY_RESPONSE |. | DSE_LDAP_SEARCHENTRYRESPONSE
| LDAP | LDAP_ADD | CEF0B0408 | [DSE_LDAP_ADD|Add Request]
| LDAP | LDAP_ADD_RESPONSE |. | DSE_LDAP_ADDRESPONSE
| LDAP | LDAP_COMPARE | CEF0B0410 | [DSE_LDAP_COMPARE|Compare Request]
| LDAP | LDAP_COMPARE_RESPONSE | CEF0B0411 | [DSE_LDAP_COMPARERESPONSE|Compare Response]
| LDAP | LDAP_MODIFY | CEF0B0412 | [DSE_LDAP_MODIFY|Modify Request]
| LDAP | LDAP_MODIFY_RESPONSE | CEF0B0413 | [DSE_LDAP_MODIFYRESPONSE|Modify Response]
| LDAP | LDAP_DELETE | CEF0B0414 | [DSE_LDAP_DELETE|Delete Request]
| LDAP | LDAP_DELETE_RESPONSE | CEF0B0415 | [DSE_LDAP_DELETERESPONSE|Delete Response]
| LDAP | LDAP_MODDN | CEF0B0416 | [DSE_LDAP_MODDN|ModifyDNRequest]
| LDAP | LDAP_MODDN_RESPONSE | CEF0B0417 | [DSE_LDAP_MODDNRESPONSE|Modify DN Response]
| LDAP | LDAP_ABANDON | CEF0B0418 | [DSE_LDAP_ABANDON|Abandon Request]
| LDAP | LDAP_EXTENDED_OPERATION | CEF0B0419 | [DSE_LDAP_EXTOP|Extended Request]
| LDAP | LDAP_EXTENDED_OPERATION_RESPONSE | CEF0B0421 | DSE_LDAP_EXTOP_RESPONSE
| LDAP | LDAP_SYSTEM_EXTENDED_OPERATION |. | DSE_LDAP_SYSEXTOP
| LDAP | LDAP_PASSWORD_MODIFY | CEF0B0424 | DSE_LDAP_PASSWDMODIFY
| LDAP | MODIFY_LDAP_SERVER_CONFIGURATION |. | DSE_LDAP_MODLDAPSERVER
| LDAP | UNKNOWN_LDAP_OPERATION |. | DSE_LDAP_UNKNOWNOP
| LDAP | LDAP_BIND_RESPONSE |. | DSE_LDAP_BINDRESPONSE
| LDAP | LDAP_SEARCH_RESPONSE |. | DSE_LDAP_SEARCHRESPONSE
| LDAP | LDAP_SEARCH_ENTRY_RESPONSE |. | DSE_LDAP_SEARCHENTRYRESPONSE
| LDAP | LDAP_ADD_RESPONSE | CEF0B0409 | [DSE_LDAP_ADDRESPONSE|Add Response]!! More Information
|| [eDirectory] Operation || [CEF|Common Event Format] CODE || [DSE|Directory User Agent] Operation
| ACCOUNT_UNLOCK | CEF0B035F | [DSE_DELETE_VALUE|Delete Modification-type]
| ACL_CHANGED | CEF0B0354 | [DSE_ADD_VALUE|Add Modification-type]
| - | - | [DSE_DELETE_VALUE|Delete Modification-type]
| ADD_MEMBER | CEF0B0336 | [DSE_ADD_VALUE|Add Modification-type]
| ADD_VALUE | CEF0B0006 | [DSE_ADD_VALUE|Add Modification-type]
| AUTHENTICATE | CEF0B035D | DSE_AUTHENTICATE
| CHANGE_PASSWORD | CEF0290067 | DSE_CHGPASS
| - | CEF029006A | DSE_NMAS_LOG_SET_DIST_PWD
| - | CEF0B0302 | DSE_NMAS_LOG_SET_PWD
| CHANGE_SECURITY_EQUALS | CEF0B0341 | [DSE_ADD_VALUE|Add Modification-type]
| - | - | DSE_DELETE_VALUE
| CREATE_OBJECT | CEF0B0001 | [DSE_ADD_ENTRY|Add Request]
| - | CEF0B0343 | [DSE_CREATE_ENTRY|Add Request]
| DELETE_ATTRIBUTE | CEF0B0009 | DSE_DELETE_ATTRIBUTE
| DELETE_MEMBER |CEF0B0337 | [DSE_DELETE_VALUE|Delete Modification-type]
| DELETE_OBJECT | CEF0B0309 | [DSE_REMOVE_ENTRY|Delete Request]
| DELETE_VALUE | CEF0B0007 | [DSE_DELETE_VALUE|Delete Modification-type]
| INTRUDER_DETECTED | CEF0B0357 | [DSE_ADD_VALUE|Add Modification-type]
| LDAP_ABANDON | CEF0B0418 | [DSE_LDAP_ABANDON|Abandon Request]
| LDAP_ADD | CEF0B0408 | [DSE_LDAP_ADD|Add Request]
| LDAP_ADD_RESPONSE | CEF0B0409 | [DSE_LDAP_ADDRESPONSE|Add Response]
| LDAP_BIND | CEF0B0401 | [DSE_LDAP_BIND|Bind Request]
| LDAP_BIND_RESPONSE | CEF0B0402 | [DSE_LDAP_BINDRESPONSE|Bind Response]
| LDAP_COMPARE | CEF0B0410 | [DSE_LDAP_COMPARE|Compare Request]
| LDAP_COMPARE_RESPONSE | CEF0B0411 | [DSE_LDAP_COMPARERESPONSE|Compare Response]
| LDAP_DELETE | CEF0B0414 | [DSE_LDAP_DELETE|Delete Request]
| LDAP_DELETE_RESPONSE | CEF0B0415 | [DSE_LDAP_DELETERESPONSE|Delete Response]
| LDAP_EXTENDED_OP | CEF0B0419 | [DSE_LDAP_EXTOP|Extended Request]
| LDAP_EXTENDED_OP_RESPONSE | CEF0B0421 | DSE_LDAP_EXTOP_RESPONSE
| LDAP_MODDN | CEF0B0416 | [DSE_LDAP_MODDN|ModifyDNRequest]
| LDAP_MODDN_RESPONSE | CEF0B0417 | [DSE_LDAP_MODDNRESPONSE|Modify DN Response]
| LDAP_MODIFY | CEF0B0412 | [DSE_LDAP_MODIFY|Modify Request]
| LDAP_MODIFY_RESPONSE | CEF0B0413 | [DSE_LDAP_MODIFYRESPONSE|Modify Response]
| LDAP_PASSWORD_MODIFY | CEF0B0424 | DSE_LDAP_PASSWDMODIFY
| LDAP_UNBIND | CEF0B0403 | [DSE_LDAP_UNBIND|Unbind Request]
| LOGIN | CEF0B035C | DSE_LOGIN_EX
| - | - | DSE_NMAS_LOG_FINISH_LOGIN_STATUS
| LOGIN_DISABLED | CEF0B0356 | [DSE_ADD_VALUE|Add Modification-type]
| LOGIN_ENABLED | CEF0B0355 | [DSE_DELETE_VALUE|Delete Request]
| MOVE_OBJECT | CEF0B0004 | DSE_ADD_ENTRYDSE_MOVE_DEST_ENTRY
| - | CEF0B0005 | DSE_ADD_ENTRYDSE_MOVE_SOURCE_ENTRY
| QUERY_CREDENTIALS | CEF0290066 | DSE_NMAS_LOG_GET_DIST_PWD
| - | CEF0290068 | DSE_NMAS_LOG_GET_PWD_STATUS
| RENAME_OBJECT | CEF0B0003 | [DSE_RENAME_ENTRY|ModifyDNRequest]
| VERIFY_PASSWORD | CEF0B030E | DSE_VERIFY_PASS
!! More Information
This page (revision-13) was last changed on 29-Nov-2024 16:16 by -jimTop