Overview#
EDirectory Common Event FormateDirectory moved from XDAS to using the Common Event Format (CEF) when Micro Focus acquired ArcSight
These values were obtained from empirical evidence at Large Organization. _
Although believed to be accurate LDAPWiki could not verify from Micro Focus documentation.
| eDirectory Operation | CEF CODE | DSE Operation |
| ACCOUNT_UNLOCK | CEF0B035F | DSE_DELETE_VALUE |
| ACL_CHANGED | CEF0B0354 | DSE_ADD_VALUE |
| - | - | DSE_DELETE_VALUE |
| ADD_MEMBER | CEF0B0336 | DSE_ADD_VALUE |
| ADD_VALUE | CEF0B0006 | DSE_ADD_VALUE |
| AUTHENTICATE | CEF0B035D | DSE_AUTHENTICATE |
| CHANGE_PASSWORD | CEF0290067 | DSE_CHGPASS |
| - | CEF029006A | DSE_NMAS_LOG_SET_DIST_PWD |
| - | CEF0B0302 | DSE_NMAS_LOG_SET_PWD |
| CHANGE_SECURITY_EQUALS | CEF0B0341 | DSE_ADD_VALUE |
| - | - | DSE_DELETE_VALUE |
| CREATE_OBJECT | CEF0B0001 | DSE_ADD_ENTRY |
| - | CEF0B0343 | DSE_CREATE_ENTRY |
| DELETE_ATTRIBUTE | CEF0B0009 | DSE_DELETE_ATTRIBUTE |
| DELETE_MEMBER | CEF0B0337 | DSE_DELETE_VALUE |
| DELETE_OBJECT | CEF0B0309 | DSE_REMOVE_ENTRY |
| DELETE_VALUE | CEF0B0007 | DSE_DELETE_VALUE |
| INTRUDER_DETECTED | CEF0B0357 | DSE_ADD_VALUE |
| LDAP_ABANDON | CEF0B0418 | DSE_LDAP_ABANDON |
| LDAP_ADD | CEF0B0408 | DSE_LDAP_ADD |
| LDAP_ADD_RESPONSE | CEF0B0409 | DSE_LDAP_ADDRESPONSE |
| LDAP_BIND | CEF0B0401 | DSE_LDAP_BIND |
| LDAP_BIND_RESPONSE | CEF0B0402 | DSE_LDAP_BINDRESPONSE |
| LDAP_COMPARE | CEF0B0410 | DSE_LDAP_COMPARE |
| LDAP_COMPARE_RESPONSE | CEF0B0411 | DSE_LDAP_COMPARERESPONSE |
| LDAP_DELETE | CEF0B0414 | DSE_LDAP_DELETE |
| LDAP_DELETE_RESPONSE | CEF0B0415 | DSE_LDAP_DELETERESPONSE |
| LDAP_EXTENDED_OP | CEF0B0419 | DSE_LDAP_EXTOP |
| LDAP_EXTENDED_OP_RESPONSE | CEF0B0421 | DSE_LDAP_EXTOP_RESPONSE |
| LDAP_MODDN | CEF0B0416 | DSE_LDAP_MODDN |
| LDAP_MODDN_RESPONSE | CEF0B0417 | DSE_LDAP_MODDNRESPONSE |
| LDAP_MODIFY | CEF0B0412 | DSE_LDAP_MODIFY |
| LDAP_MODIFY_RESPONSE | CEF0B0413 | DSE_LDAP_MODIFYRESPONSE |
| LDAP_PASSWORD_MODIFY | CEF0B0424 | DSE_LDAP_PASSWDMODIFY |
| LDAP_UNBIND | CEF0B0403 | DSE_LDAP_UNBIND |
| LOGIN | CEF0B035C | DSE_ADD_ENTRYDSE_LOGIN_EX |
| - | - | DSE_ADD_ENTRYDSE_NMAS_LOG_FINISH_LOGIN_STATUS |
| LOGIN_DISABLED | CEF0B0356 | DSE_ADD_VALUE |
| LOGIN_ENABLED | CEF0B0355 | DSE_DELETE_VALUE |
| MOVE_OBJECT | CEF0B0004 | DSE_ADD_ENTRYDSE_MOVE_DEST_ENTRY |
| - | CEF0B0005 | DSE_ADD_ENTRYDSE_MOVE_SOURCE_ENTRY |
| QUERY_CREDENTIALS | CEF0290066 | DSE_NMAS_LOG_GET_DIST_PWD |
| - | CEF0290068 | DSE_NMAS_LOG_GET_PWD_STATUS |
| RENAME_OBJECT | CEF0B0003 | DSE_RENAME_ENTRY |
| VERIFY_PASSWORD | CEF0B030E | DSE_VERIFY_PASS |
