Summary: Isode components write to logging streams when events occur.
Facility DSA_SASL
SASL authentication notifications.
Name | Severity | ID | Description | Action |
---|---|---|---|---|
DomainSearchAmbiguous | notice | 5 | The SASL mapping rule attempted to do a subtree search for a domain, which returned too many entries. | Check the domain sent from the client is correct, and the domain entries below the search base are distinct. |
DomainSearchBadFilter | error | 2 | The SASL mapping rule attempted to do a subtree search for a domain, which failed because the filter could not be parsed. | Ensure the SASL domain attribute is set correctly. |
DomainSearchEmpty | notice | 4 | The SASL mapping rule attempted to do a subtree search for a domain, which returned no entries. | Check the domain sent from the client is correct. |
DomainSearchFailed | error | 3 | The SASL mapping rule attempted to do a subtree search for a domain, which failed to start. | Check for database problems. |
DomainSearchNoTarget | error | 1 | The SASL mapping rule attempted to do a subtree search for a domain, which failed because the search base could not be resolved. | Ensure the SASL mapping search base is held locally. |
DomainSearchResult | information | 6 | The SASL mapping rule did a subtree search for a domain, which returned one result. | No action. |
InternalError | error | 16 | Some SASL function returned an error, so something has failed. Probably authentication will therefore fail. | Contact support. |
ProxyAuthFailure | authfail | 15 | The SASL user has failed to authorize. | Check if the client is authenticating with the correct user id. |
ProxyAuthSuccess | authok | 14 | The SASL user is authorizing successfully. | No action. |
RuleTrace | information | 13 | The SASL mapping rule is being used to convert an ID for a given mode. | No action. |
UserReadFailed | warning | 18 | The SASL mapping rule attempted to do a read for a user entry, which failed because the mapped DN could not be resolved. | No action. |
UserReadResult | information | 17 | The SASL mapping rule generated a DN to the user entry, which was read successfully. | No action. |
UserSearchAmbiguous | notice | 11 | The SASL mapping rule attempted to do a search for a user entry, which returned too many entries. | Check the user sent from the client is correct, and the user entries below the search base are distinct. |
UserSearchBadFilter | error | 8 | The SASL mapping rule attempted to do a search for a user entry, which failed because the filter could not be parsed. | Ensure the user sent from the client is correct. |
UserSearchEmpty | notice | 10 | The SASL mapping rule attempted to do a search for a user entry, which returned no entries. | Check the user sent from the client is correct, and the search base is correct. |
UserSearchFailed | error | 9 | The SASL mapping rule attempted to do a search for a user entry, which failed to start. | Check for database problems. |
UserSearchNoTarget | error | 7 | The SASL mapping rule attempted to do a search for a user entry, which failed because the search base could not be resolved. | Ensure the search base is held locally. |
UserSearchResult | information | 12 | The SASL mapping rule attempted to do a search for a user entry, which returned one result. | No action. |
DomainSearchNoTarget
- Message Text
- Domain search failed with no target (rule: %1 id: %2 base: %3 domain: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Domain.
- Description
- The SASL mapping rule attempted to do a subtree search for a domain, which failed because the search base could not be resolved.
- Action
- Ensure the SASL mapping search base is held locally.
DomainSearchBadFilter
- Message Text
- Domain search failed with bad filter (rule: %1 id: %2 base: %3 domain: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Domain.
- Description
- The SASL mapping rule attempted to do a subtree search for a domain, which failed because the filter could not be parsed.
- Action
- Ensure the SASL domain attribute is set correctly.
DomainSearchFailed
- Message Text
- Domain search failed to start (rule: %1 id: %2 base: %3 domain: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Domain.
- Description
- The SASL mapping rule attempted to do a subtree search for a domain, which failed to start.
- Action
- Check for database problems.
DomainSearchEmpty
- Message Text
- Domain search returned no entries (rule: %1 id: %2 base: %3 domain: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Domain.
- Description
- The SASL mapping rule attempted to do a subtree search for a domain, which returned no entries.
- Action
- Check the domain sent from the client is correct.
DomainSearchAmbiguous
- Message Text
- Domain search returned multiple entries (rule: %1 id: %2 base: %3 domain: %4 results: %5)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Domain.
- Results.
- Description
- The SASL mapping rule attempted to do a subtree search for a domain, which returned too many entries.
- Action
- Check the domain sent from the client is correct, and the domain entries below the search base are distinct.
DomainSearchResult
- Message Text
- Domain search returned a result (rule: %1 id: %2 base: %3 domain: %4 result: %5)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Domain.
- Result.
- Description
- The SASL mapping rule did a subtree search for a domain, which returned one result.
- Action
- No action.
UserSearchNoTarget
- Message Text
- User search failed with no target (rule: %1 id: %2 base: %3 scope: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Search scope.
- Description
- The SASL mapping rule attempted to do a search for a user entry, which failed because the search base could not be resolved.
- Action
- Ensure the search base is held locally.
UserSearchBadFilter
- Message Text
- User search failed with bad filter (rule: %1 id: %2 base: %3 scope: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Search scope.
- Description
- The SASL mapping rule attempted to do a search for a user entry, which failed because the filter could not be parsed.
- Action
- Ensure the user sent from the client is correct.
UserSearchFailed
- Message Text
- Domain search failed to start (rule: %1 id: %2 base: %3 scope: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Search scope.
- Description
- The SASL mapping rule attempted to do a search for a user entry, which failed to start.
- Action
- Check for database problems.
UserSearchEmpty
- Message Text
- User search returned no entries (rule: %1 id: %2 base: %3 scope: %4)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Search scope.
- Description
- The SASL mapping rule attempted to do a search for a user entry, which returned no entries.
- Action
- Check the user sent from the client is correct, and the search base is correct.
UserSearchAmbiguous
- Message Text
- User search returned multiple entries (rule: %1 id: %2 base: %3 scope: %4 results: %5)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Search scope.
- Results.
- Description
- The SASL mapping rule attempted to do a search for a user entry, which returned too many entries.
- Action
- Check the user sent from the client is correct, and the user entries below the search base are distinct.
UserSearchResult
- Message Text
- User search returned a result (rule: %1 id: %2 base: %3 scope: %4 result: %5)
- Parameters
- Mapping rule name.
- SASL ID.
- Search base.
- Search scope.
- Result.
- Description
- The SASL mapping rule attempted to do a search for a user entry, which returned one result.
- Action
- No action.
RuleTrace
- Message Text
- Mapping %2 using %1 for %3 for %4 mechanism
- Parameters
- Mapping rule name.
- SASL ID.
- Mode.
- GSSAPI/Generic mechanism.
- Description
- The SASL mapping rule is being used to convert an ID for a given mode.
- Action
- No action.
ProxyAuthSuccess
- Message Text
- User %1 (%2) authorized as %3 (%4)
- Parameters
- Authentication ID.
- Authentication DN.
- Authorization ID.
- Authorization DN.
- Description
- The SASL user is authorizing successfully.
- Action
- No action.
ProxyAuthFailure
- Message Text
- User %1 (%2) is NOT authorized as %3 (%4)
- Parameters
- Authentication ID.
- Authentication DN.
- Authorization ID.
- Authorization DN.
- Description
- The SASL user has failed to authorize.
- Action
- Check if the client is authenticating with the correct user id.
InternalError
- Message Text
- SASL function %1(%2) returned an error.
- Parameters
- Function.
- Data.
- Description
- Some SASL function returned an error, so something has failed. Probably authentication will therefore fail.
- Action
- Contact support.
UserReadResult
- Message Text
- User read returned a result (rule: %1 id: %2 dn: \"%3\")
- Parameters
- Mapping rule name.
- SASL ID.
- Mapped DN.
- Description
- The SASL mapping rule generated a DN to the user entry, which was read successfully.
- Action
- No action.
UserReadFailed
- Message Text
- User search failed with no target (rule: %1 id: %2 dn:\"%3\")
- Parameters
- Mapping rule name.
- SASL ID.
- Mapped DN.
- Description
- The SASL mapping rule attempted to do a read for a user entry, which failed because the mapped DN could not be resolved.
- Action
- No action.