HP LaserJet Enterprise, HP PageWide Enterprise - HP Security Event Logging Messaging Reference (white paper)

Chapter 2 – Enhanced security event logging 79
Explanation:
A search root for looking up the user’s name and email for LDAP Sign In was deleted.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<value> - Bind and search root that was deleted.
<user> - Authenticated user who deleted the search root. If an unauthenticated user deleted the
search root, the user key-value pair is not contained within the message.
<client computer IP address> - IP address of the client computer that sent the request to delete
the search root.
Message:
<device type>: LDAP Sign In configuration modified; time="<timestamp>"
action=bind_and_search_root_order_modified user="<user>" source_IP="<client computer IP
address>" outcome=success
Interface(s):
EWS, WS*
Syslog severity:
Informational
Explanation:
The order of the search roots used for looking up the user’s name and email for LDAP Sign In was
modified.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user> - Authenticated user who modified the order of the search roots. If an unauthenticated
user modified the order of the search roots, the user key-value pair is not contained within the
message.
<client computer IP address> - IP address of the client computer that sent the request to modify
the order of the search roots.
Message:
<device type>: LDAP Sign In configuration modified; time="<timestamp>" action=
LDAP_sign_in_configuration_deleted user="<user>" source_IP="<client computer IP address>"
outcome=success
Interface(s):
WS*
Syslog severity:
Informational
Explanation:
The LDAP Sign In configuration was deleted.
Variables:
<device type> - see Table 2-2.
<timestamp> - see Table 2-2.
<user> - Authenticated user who deleted the LDAP Sign In configuration. If an unauthenticated
user deleted the LDAP Sign In configuration, the user key-value pair is not contained within the
message.
<client computer IP address> - IP address of the client computer that sent the request to delete
the LDAP Sign In configuration.
Message:
<device type>: LDAP Authentication Test; time="<timestamp>" username="<username>"
server="<server address>" port="<server port>" admin_name="<administrator DN>"
bind_prefix="<bind prefix>" search_root="<search roots>" name_match_attribute="<name match
attribute>" email_attribute="<email match attribute>" group_attribute="<group match
attribute>" group_exact_match=<group exact match> source_IP="<client computer IP address>"
outcome=<test result>
Interface(s):
EWS
Syslog severity:
Informational