Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-9104

Edit end entity can log the wrong changed DN if DN merge is used

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: EJBCA 7.4.0
    • Component/s: None
    • Labels:
      None
    • Issue discovered during:
      Another issue
    • Sprint:
      EJBCA Team Bob - 2020 w16

      Description

      The call EndEntityManagementSessionBean.changeUser may merge DNs.

      Running the test EndEntityManagemenSessionTest one can see that is logs the input DN in the RA_EDITENDENTITY audit log, instead of the merged one.

      2020-04-28 17:53:36,957 INFO [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-113) 2020-04-28 17:53:36+02:00;RA_EDITENDENTITY;SUCCESS;RA;CORE;EndEntityManagementSessionTest;1625184452;;331500;ms
      g=Edited end entity 331500.;subjectAltName= -> null;subjectDN=E=foo@bar.com,CN=331500,OU=OrgUnit2,OU=hoho,O=AnaTom,C=SE -> EMAIL=foo@bar.com, OU=hoho1

      when it should be:

      2020-04-28 18:08:30,525 INFO [org.cesecore.audit.impl.log4j.Log4jDevice] (default task-200) 2020-04-28 18:08:30+02:00;RA_EDITENDENTITY;SUCCESS;RA;CORE;EndEntityManagementSessionTest;1625184452;;104848;ms
      g=Edited end entity 104848.;subjectDN=E=foo@bar.com,CN=104848,OU=OrgUnit2,OU=hoho,O=AnaTom,C=SE -> E=foo@bar.com,CN=104848,OU=hoho1,OU=hoho,O=AnaTom,C=SE

       

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              tomas Tomas Gustavsson
              Reporter:
              tomas Tomas Gustavsson
              Verified by:
              Ulf Undmark
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 30 minutes
                  30m
                  Remaining:
                  Remaining Estimate - 30 minutes
                  30m
                  Logged:
                  Time Spent - Not Specified
                  Not Specified