WAS v8.5 > WebSphere applications > Service integration > Service integration security > Messaging security audit events

A cell administrator updates a SDO repository

The messaging security audit events SECURITY_AUTHN, SECURITY_AUTHZ, SECURITY_MGMT_CONFIG, and SECURITY_AUTHN_TERMINATE are produced when a cell administrator changes the contents of a SDO repository in an import or remove operation.

Audit events produced when a cell administrator changes the contents of a SDO repository in an import or remove operation are as follows:

  1. The cell administrator connects to a messaging bus:

    1. A SECURITY_AUTHN event is produced when the identity of the messaging client connecting to the Enterprise Java Bean container that includes the SDO repository is authenticated by the application server.
    2. A SECURITY_AUTHZ event is produced when the identity of the messaging client is checked for access authority to the foreign bus.

  2. A SECURITY_MGMT_CONFIG event is produced when messaging client issues a remove or import request that results in a change to the contents of the SDO repository.

  3. When the connection between a messaging client and the foreign bus is terminated, a SECURITY_AUTHN_TERMINATE event is produced.

To record these audit events, you create security event type filters for them.


Related concepts:

A messaging client sending a message to a message destination
A messaging client receiving a message from a message destination
Messaging engines connecting to one another on the same bus
Messaging engines connecting to one another on different buses
A publisher sending a message to a topic
A messaging client receiving a message from a subscription


Related


Create security auditing event type filters
Auditing the service integration security infrastructure


+

Search Tips   |   Advanced Search