{"componentChunkName":"component---src-templates-manual-template-tsx","path":"/manuals/client-user/61/broker-auditmessages.html","webpackCompilationHash":"d1750f6cc413894a8b5c","result":{"data":{"promoBlocks":{"edges":[{"node":{"contentful_id":"47glnSpWzXeFylv2vfQEF8","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"7KIOfSfgwJnCXuvRN6CfrP","textContent":"Standing privileges are a risk with PAM","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"nodeType\":\"document\",\"data\":{},\"content\":[{\"nodeType\":\"paragraph\",\"content\":[{\"nodeType\":\"text\",\"value\":\"Start your journey towards a just-in-time (JIT) model with zero standing privileges (ZSP). Read 'Remove Standing Privileges Through a Just-In-Time PAM Approach' by Gartner , courtesy of SSH.COM.\\n \\n\",\"marks\":[],\"data\":{}}],\"data\":{}}]}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"19EUesynV2Z7HHcuJk0BAS","content":"Download Gartner research","internalLink":null,"externalLink":"https://info.ssh.com/gartner_research_privileged_access_management","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"2ClylmBswcfDx4XdO7NTmL","title":"ICON Gartner ZSP","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png","contentType":"image/png"},"fluid":{"aspectRatio":1,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=750&h=750&q=50 750w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1500&h=1500&q=50 1500w,\n//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=1601&h=1601&q=50 1601w","sizes":"(max-width: 3000px) 100vw, 3000px"},"fixed":{"width":3000,"height":3000,"src":"//images.ctfassets.net/0lvk5dbamxpi/2ClylmBswcfDx4XdO7NTmL/78e899153ed66aec3b03b9a2cacd112d/ICON_Gartner_ZSP_ICON_Gartner.png?w=3000&q=50","srcSet":""}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block2","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}},{"node":{"contentful_id":"6dfNaA1UlY4bADKQk6awhs","internal":{"type":"ContentfulPromotionBlock"},"title":{"internal":{"type":"ContentfulHeading"},"contentful_id":"49Tb2wSR21P5C2cpcgMZ3","textContent":"Get Multi-cloud PAM software - for free!","color":"black","size":"medium"},"subTitle":null,"content":{"nodeType":"document","internal":{"content":"{\"data\":{},\"content\":[{\"data\":{},\"content\":[{\"data\":{},\"marks\":[],\"value\":\"PrivX® Free replaces your in-house jump hosts and combines your AWS, GCP and Azure access into one multi-cloud solution.\\n \\n\",\"nodeType\":\"text\"}],\"nodeType\":\"paragraph\"}],\"nodeType\":\"document\"}"}},"callToAction":{"internal":{"type":"ContentfulButton"},"contentful_id":"1dmQ13jyyZ46ID07eVNVFb","content":"PrivX Free","internalLink":null,"externalLink":"https://info.ssh.com/privx-free-access-management-software","assetLink":null,"anchor":null},"picture":{"internal":{"type":"ContentfulAsset"},"contentful_id":"4UUYdjING8micwZQur5o6d","title":"ICON computer (search)","description":"","file":{"url":"//images.ctfassets.net/0lvk5dbamxpi/4UUYdjING8micwZQur5o6d/1b378a0f4646075c7a4788f1afffbabe/ICON_computer__search_.svg","contentType":"image/svg+xml"},"fluid":{"aspectRatio":null,"src":null,"srcSet":null,"sizes":null},"fixed":{"width":null,"height":null,"src":null,"srcSet":null}},"centered":true,"indentMainContent":null,"transparentBackground":null,"imageScale":70,"imagePadding":null,"name":"WIKI migration side promo block1","product":null,"funnel":null,"topic":null,"keywords":null,"type":null,"priority":null,"globalOverride":null}}]}},"pageContext":{"isCreatedByStatefulCreatePages":false,"body":"
\"SSH\"\"
\"\"
\"\"
\"Home\" \"Prev\" \"Up\" \"Next\"  

Appendix E Audit Messages

This appendix lists the audit messages generated by the\nConnection Broker.

1000 KEX_failure

Level: warning

Origin: SSH Tectia Server, Connection Broker

The key exchange failed.

Default log facility: normal

\n

ArgumentDescription
Username User's login name (not present for first KEX)
Algorithm KEX algorithm name (not present if failure happens before choosing the algorithm)
Text Error description
Session-Id Session identifier

\n

1001 Algorithm_negotiation_failure

Level: warning

Origin: SSH Tectia Server, Connection Broker

Algorithm negotiation failed - there was no common algorithm in the client's and server's lists.

Default log facility: normal

\n

ArgumentDescription
Username User's login name (not present for first KEX)
Algorithm Algorithm type
Client algorithms Client's algorithm list
Server algorithms Server's algorithm list
Session-Id Session identifier

\n

1002 Algorithm_negotiation_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

Algorithm negotiation succeeded.

Default log facility: normal

\n

ArgumentDescription
Username User's login name (not present for first KEX)
Text Negotiated algorithms
Session-Id Session identifier

\n

1003 KEX_success

Level: informational

Origin: Connection Broker

Key-exchange was successful.

Default log facility: normal

\n

ArgumentDescription
Session-Id Session identifier.
Protocol-session-Id Protocol session identifier.

\n

1100 Certificate_validation_failure

Level: informational

Origin: SSH Tectia Server, Connection Broker

A received certificate failed to validate correctly under any of the configured CAs.

Default log facility: normal

\n

ArgumentDescription
Username User's login name (not present for first KEX)
Text Resulting search states for all configured CAs.
Session-Id Session identifier

\n

1101 Certificate_validation_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

A received certificate validated correctly under one or more configured CAs.

Default log facility: normal

\n

ArgumentDescription
Username User's login name
CA List A list of CAs under which the user's certificate validated correctly.
Session-Id Session identifier

\n

1110 CM_find_started

Level: informational

Origin: SSH Tectia Server, Connection Broker

A low-level search was started in the certificate validation subsystem.

Default log facility: normal

\n

ArgumentDescription
Ctx Search context
Search constraints Search constraints.

\n

1111 CM_find_finished

Level: informational

Origin: SSH Tectia Server, Connection Broker

A low-level find operation has finished\t in the certificate validation subsystem.

Default log facility: normal

\n

ArgumentDescription
Ctx Context pointer\t\t\t\t\t\t that identifies\t\t\t\t\t\t the search

\n

1112 CM_cert_not_in_search_interval

Level: informational

Origin: SSH Tectia Server, Connection Broker

The certificate is not valid during the required time period.

Default log facility: normal

\n

ArgumentDescription
SubjectName Subject name of the certificate
Text Error description
Ctx Search context

\n

1113 CM_certificate_revoked

Level: informational

Origin: SSH Tectia Server, Connection Broker

A certificate was found to be revoked.

Default log facility: normal

\n

ArgumentDescription
SubjectName Subject name of the certificate
Ctx The context pointer of the search

\n

1114 CM_cert_search_constraint_mismatch

Level: informational

Origin: SSH Tectia Server, Connection Broker

The certificate did not satisfy the constraints set for the search.

Default log facility: normal

\n

ArgumentDescription
SubjectName Subject name of the certificate
Text Description of the mismatch
Ctx Search context

\n

1115 CM_ldap_search_started

Level: informational

Origin: SSH Tectia Server, Connection Broker

An LDAP search for a CRL or a sub-CA\t is being started.

Default log facility: normal

\n

ArgumentDescription
Text Search details

\n

1116 CM_ldap_search_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

An LDAP search for a CRL or a sub-CA completed successfully.

Default log facility: normal

\n

ArgumentDescription
Text Search details

\n

1117 CM_ldap_search_failure

Level: informational

Origin: SSH Tectia Server, Connection Broker

The attempt to contact an LDAP server was unsuccessful.

Default log facility: normal

\n

ArgumentDescription
Text Error details

\n

1118 CM_http_search_started

Level: informational

Origin: SSH Tectia Server, Connection Broker

The certificate validation subsystem is initiating a search for a CRL or a sub-CA through the HTTP protocol.

Default log facility: normal

\n

ArgumentDescription
Text Search target

\n

1119 CM_http_search_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

An HTTP request for a CRL or a sub-CA completed successfully.

Default log facility: normal

\n

ArgumentDescription
Text Status message detailing what was being retrieved

\n

1120 CM_http_search_failure

Level: informational

Origin: SSH Tectia Server, Connection Broker

An HTTP request for a CRL or a sub-CA failed.

Default log facility: normal

\n

ArgumentDescription
Text Error details

\n

1121 CM_crl_added

Level: informational

Origin: SSH Tectia Server, Connection Broker

A new CRL was successfully added to the certificate validation subsystem.

Default log facility: normal

\n

ArgumentDescription
Text CRL's issuer and validity period

\n

1122 Certificate_end_point_id_check_success

Level: informational

Origin: Connection Broker

End point identity check succeeded.

Default log facility: normal

\n

ArgumentDescription
Server Host name
Text Explanatory message

\n

1123 Certificate_end_point_id_check_warning

Level: informational

Origin: Connection Broker

Certificate end point identity check warning.

Default log facility: normal

\n

ArgumentDescription
Server Host name
Text Warning message

\n

1124 Certificate_end_point_id_check_failure

Level: informational

Origin: Connection Broker

Certificate end point identity check failure.

Default log facility: normal

\n

ArgumentDescription
Server Host name
Text Error message

\n

1200 Key_store_create

Level: informational

Origin: SSH Tectia Server, Connection Broker

Key store created.

Default log facility: normal

1201 Key_store_create_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

Key store creation failed.

Default log facility: normal

1202 Key_store_destroy

Level: informational

Origin: SSH Tectia Server, Connection Broker

Key store destroyed.

Default log facility: normal

1204 Key_store_add_provider

Level: informational

Origin: SSH Tectia Server, Connection Broker

Added a provider to the key store.

Default log facility: normal

\n

ArgumentDescription
Type Provider type

\n

1205 Key_store_add_provider_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

Adding a provider to the key store failed.

Default log facility: normal

\n

ArgumentDescription
Type Provider type
EK error Error message

\n

1206 Key_store_remove_provider

Level: informational

Origin: SSH Tectia Server, Connection Broker

Removed a provider from the key store.

Default log facility: normal

\n

ArgumentDescription
Init info Provider name

\n

1208 Key_store_decrypt

Level: informational

Origin: SSH Tectia Server, Connection Broker

A key was used successfully for decryption.

Default log facility: normal

\n

ArgumentDescription
Key path Key path
Fwd path Fwd path

\n

1209 Key_store_decrypt_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

A key was used unsuccessfully for decryption.

Default log facility: normal

\n

ArgumentDescription
Key path Key path
Fwd path Fwd path
Crypto error Error string

\n

1210 Key_store_sign

Level: informational

Origin: SSH Tectia Server, Connection Broker

A key was used successfully for signing.

Default log facility: normal

\n

ArgumentDescription
Key path Key path
Fwd path Fwd path

\n

1211 Key_store_sign_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

A key was used unsuccessfully for signing.

Default log facility: normal

\n

ArgumentDescription
Key path Key path
Fwd path Fwd path
Crypto error Error string

\n

1212 Key_store_sign_digest

Level: informational

Origin: SSH Tectia Server, Connection Broker

A key was used successfully for signing a digest.

Default log facility: normal

\n

ArgumentDescription
Key path Key path
Fwd path Fwd path

\n

1213 Key_store_sign_digest_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

A key was used unsuccessfully for signing a digest.

Default log facility: normal

\n

ArgumentDescription
Key path Key path
Fwd path Fwd path
Crypto error Error string

\n

1214 Key_store_ek_provider_failure

Level: warning

Origin: SSH Tectia Server, Connection Broker

External key provider failure.

Default log facility: normal

\n

ArgumentDescription
Key path Key path
Text Key label

\n

1300 Channel_inbound_statistics

Level: informational

Origin: Connection Broker, SSH Tectia Server

Statistics for the inbound side of a channel (traffic arriving from the network)

Default log facility: normal

\n

ArgumentDescription
Username User's login name
Session-Id Session identifier
Channel Id Local channel id
Packet count Protocol packet count
Packet size Average protocol packet payload size

\n

1301 Channel_outbound_statistics

Level: informational

Origin: Connection Broker, SSH Tectia Server

Statistics for the outbound side of a channel (traffic going to the network)

Default log facility: normal

\n

ArgumentDescription
Username User's login name
Session-Id Session identifier
Channel Id Local channel id
Packet count Protocol packet count
Packet size Average protocol packet payload size
Packet size Final size of outbound channel buffer

\n

6000 Broker_client_connect

Level: informational

Origin: Connection Broker

A client connected to the Broker.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Process id
Local username Local user name

\n

6001 Broker_client_connect_failed

Level: warning

Origin: Connection Broker

A client attempted to connect unsuccessfully to the Broker.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Process id
Local username Local user name
Text Reason

\n

6002 Broker_client_disconnect

Level: informational

Origin: Connection Broker

\t A client disconnected from the Broker.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Process id
Local username Local user name

\n

6004 Broker_exec_channel_open

Level: informational

Origin: Connection Broker

\t The Broker opened an exec channel.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Server Server host
Server Port Server port
Remote username Remote user name
Local username Local user name
Command Command
Text Exec parameters
Channel Id Channel ID
Session-Id Session ID

\n

6005 Broker_exec_channel_open_failed

Level: warning

Origin: Connection Broker

\t The Broker failed to open an exec channel for a client.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Server Server host
Server Port Server port
Remote username Remote user name
Local username Local user name
Command Command
Text Exec parameters
Channel Id Channel ID
Text Reason
Session-Id Session ID

\n

6006 Broker_tunnel_open

Level: informational

Origin: Connection Broker

\t The Broker opened a tunnel for a client.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Server Server host
Server Port Server port
Remote username Remote user name
Local username Local user name
Dst Destination host
Dst Port Destination port
Tunnel type Tunnel type
Session-Id Session ID

\n

6007 Broker_tunnel_open_failed

Level: warning

Origin: Connection Broker

\t The Broker failed to open a tunnel for a client.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Server Server host
Server Port Server port
Remote username Remote user name
Local username Local user name
Dst Destination host
Dst Port Destination port
Tunnel type Tunnel type
Text Reason
Session-Id Session ID

\n

6008 Broker_tunnel_listener_open

Level: informational

Origin: Connection Broker

\t The Broker opened a tunnel listener for a client.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Server Server host
Server Port Server port
Remote username Remote user name
Local username Local user name
Listener Listener host
Listener Port Listener port
Dst Destination host
Dst Port Destination port
Tunnel type Tunnel type
Text Tunnel listener parameters
Session-Id Session ID

\n

6009 Broker_tunnel_listener_open_failed

Level: warning

Origin: Connection Broker

\t The Broker failed to open a tunnel listener for a client.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Server Server host
Server Port Server port
Remote username Remote user name
Local username Local user name
Listener Listener host
Listener Port Listener port
Dst Destination host
Dst Port Destination port
Tunnel type Tunnel type
Text Tunnel listener parameters
Text Reason
Session-Id Session ID

\n

6010 Broker_channel_fd_strip

Level: informational

Origin: Connection Broker

The Broker destroyed a channel object (and returned the underlying fd to the client).

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Text Channel permanent?
Local username Local user name
Session-Id Session ID

\n

6011 Broker_channel_fd_strip_failed

Level: warning

Origin: Connection Broker

The Broker failed to destroy a channel object (and return the underlying fd to the client).

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Text Channel permanent?
Local username Local user name
Text Reason
Session-Id Session ID

\n

6012 Broker_channel_control

Level: informational

Origin: Connection Broker

The Broker sent a channel control message.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Command Command
Args Arguments
Local username Local user name
Session-Id Session ID

\n

6013 Broker_channel_control_failed

Level: warning

Origin: Connection Broker

The Broker failed to send a channel control message.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Command Command
Args Arguments
Local username Local user name
Text Reason
Session-Id Session ID

\n

6014 Broker_channel_close

Level: informational

Origin: Connection Broker

The Broker closed a channel.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Exit Value Exit value
Local username Local user name
Session-Id Session ID

\n

6015 Broker_channel_close_failed

Level: warning

Origin: Connection Broker

The Broker failed to close a channel.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Local username Local user name
Text Reason

\n

6018 Broker_server_version_request

Level: informational

Origin: Connection Broker

\t The Broker requested (and got) the server version.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Ver Version
Local username Local user name
Session-Id Session ID

\n

6019 Broker_server_version_request_failed

Level: warning

Origin: Connection Broker

\t The Broker failed to get the server version.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Local username Local user name
Text Reason
Session-Id Session ID

\n

6020 Broker_channel_process_exit

Level: informational

Origin: Connection Broker

Channel process exit request was successful.

Default log facility: discard

\n

ArgumentDescription
Client Client name
Pid Client process id
Local username Local user name
Session-Id Session ID

\n

6021 Broker_channel_process_exit_failed

Level: warning

Origin: Connection Broker

\t Channel process exit request failed.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Text Reason
Local username Local user name
Session-Id Session ID

\n

6025 Broker_connector_license_check_failed

Level: warning

Origin: Connection Broker

Connector license check failed.

Default log facility: normal

\n

ArgumentDescription
Text Error message
Session-Id Session identifier

\n

6026 Broker_server_rekey

Level: notice

Origin: Connection Broker

\t The Broker requested rekeying and it was successful.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Local username Local user name
Session-Id Session ID

\n

6027 Broker_server_rekey_failed

Level: warning

Origin: Connection Broker

\t The Broker requested rekeying but it failed.

Default log facility: normal

\n

ArgumentDescription
Client Client name
Pid Client process id
Channel Id Channel ID
Local username Local user name
Text Reason
Session-Id Session ID

\n

6100 Broker_starting

Level: notice

Origin: Connection Broker

The Broker is starting.

Default log facility: normal

\n

ArgumentDescription
Local username Local user name

\n

6101 Broker_start_failed

Level: warning

Origin: Connection Broker

Starting the Broker failed.

Default log facility: normal

\n

ArgumentDescription
Local username Local user name
Success | Error Error code
Text Error message

\n

6102 Broker_running

Level: notice

Origin: Connection Broker

The Broker is running.

Default log facility: normal

\n

ArgumentDescription
Local username Local user name
Text Message text

\n

6104 Broker_stopping

Level: notice

Origin: Connection Broker

The Broker is stopping.

Default log facility: normal

\n

ArgumentDescription
Local username Local user name

\n

6106 Broker_reconfig_started

Level: notice

Origin: Connection Broker

Reconfiguration started.

Default log facility: normal

\n

ArgumentDescription
Local username Local user name

\n

6108 Broker_reconfig_finished

Level: notice

Origin: Connection Broker

Reconfiguration finished.

Default log facility: normal

\n

ArgumentDescription
Local username Local user name
Success | Error Error code

\n

6114 Broker_config_deprecated_element

Level: warning

Origin: Connection Broker

The Broker config contains a deprecated element.

Default log facility: normal

\n

ArgumentDescription
Text Event description.

\n

6200 Broker_tcp_connect

Level: informational

Origin: Connection Broker

Broker TCP connection attempt was successful.

Default log facility: discard

\n

ArgumentDescription
Dst Destination host
Dst Port Destination port
Src Port Source port
Local username Local username

\n

6201 Broker_tcp_connect_failed

Level: warning

Origin: Connection Broker

Broker TCP connection attempt failed.

Default log facility: normal

\n

ArgumentDescription
Dst Destination host
Dst Port Destination port
Local username Local username
NIO error NIO error

\n

6204 Broker_transport_connect

Level: informational

Origin: Connection Broker

A transport was connected through TCP.

Default log facility: discard

\n

ArgumentDescription
Dst Destination host
Dst Port Destination port
Remote username Remote username
Src Port Source port
Local username Local username
Session-Id Session ID

\n

6206 Broker_transport_gateway_connect

Level: informational

Origin: Connection Broker

A transport was connected through a gateway handle.

Default log facility: discard

\n

ArgumentDescription
Dst Destination host
Dst Port Destination port
Remote username Remote username
Local username Local username
Session-Id Session ID

\n

6208 Broker_connection_connect

Level: informational

Origin: Connection Broker

The Broker got successfully a Secure Shell connection up.

Default log facility: discard

\n

ArgumentDescription
Dst Destination host
Dst Port Destination port
Local username Local username
Remote username Remote username
Uses gateway? Is this going through a gateway handle
Session-Id Session ID

\n

6209 Broker_connection_connect_failed

Level: warning

Origin: Connection Broker

The Broker failed to get a Secure Shell connection up.

Default log facility: normal

\n

ArgumentDescription
Dst Destination host
Dst Port Destination port
Local username Local username
Remote username Remote username
Uses gateway? Is this going through a gateway handle
Session-Id Session ID
Text Error code

\n

6210 Broker_connection_disconnect

Level: informational

Origin: Connection Broker

A Secure Shell connection initiated by the Broker was disconnected.

Default log facility: discard

\n

ArgumentDescription
Local username Local user
Session-Id Session identifier

\n

6211 Broker_unknown_hostkey_accepted

Level: warning

Origin: Connection Broker

* The Broker accepted an unknown hostkey without user interaction * because of configuration.

Default log facility: normal

\n

ArgumentDescription
Text Key digest
Dst Destination host
Dst Port Destination port
Local username Local username
Remote username Remote username

\n

6212 Broker_new_hostkey

Level: warning

Origin: Connection Broker

* First connection to a server or this server hostkey was never * saved before.

Default log facility: normal

\n

ArgumentDescription
Text Key digest
Dst Destination host
Dst Port Destination port
Local username Local username
Remote username Remote username

\n

6213 Broker_hostkey_changed

Level: warning

Origin: Connection Broker

* Server hostkey is different than the saved hostkey.

Default log facility: normal

\n

ArgumentDescription
Text Key digest
Dst Destination host
Dst Port Destination port
Local username Local username
Remote username Remote username

\n

6301 Broker_userauth_failure

Level: warning

Origin: Connection Broker

User authentication failed.

Default log facility: normal

\n

ArgumentDescription
Text Reason
Session-Id Session identifier

\n

6302 Broker_userauth_method_success

Level: informational

Origin: Connection Broker

A user authentication method succeeded.

Default log facility: discard

\n

ArgumentDescription
Text Authentication method
Session-Id Session identifier

\n

6303 Broker_userauth_method_failure

Level: warning

Origin: Connection Broker

A user authentication method failed.

Default log facility: discard

\n

ArgumentDescription
Text Authentication method
Text Reason
Session-Id Session identifier

\n

6401 Connector_filter_rule

Level: informational

Origin: Connection Broker

Connector not tunneling

Default log facility: discard

\n

ArgumentDescription
Connector Connector action
DNS entry DNS entry ID
Application Application
Dst Address
Dst Port Port

\n

\"Home\" \"Prev\" \"Up\" \"Next\"  

\n Copyright 2010 SSH Communications Security Corp.
\n This software is protected by international copyright laws. All rights reserved.
Contact Information

","head":"Appendix E Audit Messages","url":"/manuals/client-user/61/broker-auditmessages.html"}}}