Einleitung
1.7.3 Protokollierte Sicherheitsereignisse
Kategorie
SE_LOCAL_UNSUCCESSFUL_LOGON
(Ungültiger Benutzername)
SE_LOCAL_UNSUCCESSFUL_LOGON
(Ungültiges Passwort)
SE_NETWORK_SUCCESSFUL_LOGON
20
Ereignismeldung
assigned to groups:
{role}
ruggedcom
rmfmgr[{pid}]:
username:{user
name} usid:{user
id} started {context}
session from
ip:127.0.0.1 source-
port:{src port}
through {local
interface} protocol
audit user: {user
LOG_AUTHPRIV
name}1/0 no such
local user
login failed,
LOG_AUTHPRIV
reason='No
such local user',
user='{username}',
context='{context}',
proto='{local
interface}', user
ipaddr='127.0.0.1'
audit user:
LOG_AUTHPRIV
{username}/0
Provided bad
password
login failed,
LOG_AUTHPRIV
reason='Bad
password',
user='{username}',
context='{context}',
proto='{protocol}',
user
ipaddr='127.0.0.1''
audit user:
LOG_AUTHPRIV
{username}/0
logged in over
{protocol} from
{source ip-address}
with authmeth:
{authentication-
method}
audit user: admin/
LOG_AUTHPRIV
{user id} assigned to
groups: {role}
username:{username}
usid:{user id} started
{session-type} session
from ip:{source ip-
address} source-port:
{source port} through
{protocol} protocol
Anlage
Schweregrad Ereignistyp Protokoll
LOG_AUTH
Hinweis
Info
Fehler
Info
Fehler
Info
Info
LOG_AUTH
Hinweis
RUGGEDCOM ROX II v2.15 Weboberfläche
Konfigurationshandbuch, 05/2022, C79000-G8900-1534-02
Ereignis
Auth.log
Ereignis
Auth.log
Ereignis
Auth.log
Ereignis
Auth.log
Ereignis
Auth.log
Ereignis
Auth.log
Ereignis
Auth.log
Ereignis
Auth.log