HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 78
<user> - Authenticated user who set, cleared, or modified the “Retrieve the device user’s group
using this attribute” setting. If an unauthenticated user set, cleared, or modified the “Retrieve the
device user’s group using this attribute” setting, the user key-value pair is not contained within
the message.
<client computer IP address> - IP address of the client computer that sent the request to set, clear,
or modify the “Retrieve the device user’s group using this attribute” setting.
Message:
<device type>: LDAP Sign In configuration modified; time="<timestamp>"
item=exact_match_on_group_attribute value="<value>" old_value="<old value>" user="<user>"
source_IP="<client computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The “Exact match on Group attribute” setting for LDAP Sign In was either enabled or disabled.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - New setting value. Possible values are:
• enable
• disable
<old value> - Old setting value. Possible values are:
• enable
• disable
<user> - Authenticated user who enabled or disabled the “Exact match on Group attribute”
setting. If an unauthenticated user enabled or disabled the “Exact match on Group attribute”
setting, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to enable or
disable the “Exact match on Group attribute” setting.
Message:
<device type>: LDAP Sign In configuration modified; time="<timestamp>"
action=bind_and_search_root_added value="<value>" user="<user>" source_IP="<client
computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
A search root for looking up the user’s name and email for LDAP Sign In was added.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - Bind and search root that was added.
<user> - Authenticated user who added the search root. If an unauthenticated user added the
search root, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to add the
search root.
Message:
<device type>: LDAP Sign In configuration modified; time="<timestamp>"
action=bind_and_search_root_deleted value="<value>" user="<user>" source_IP="<client
computer IP address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational