Attachment 17031 Details for Bug 14920 – Sample json/auth.log

Sample json/auth.log

json_auth.log (text/x-log), 4.70 KB, created by Daniel Berteaud on 2021-11-28 18:22:17 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Daniel Berteaud

Created: 2021-11-28 18:22:17 UTC

Size: 4.70 KB

patch

obsolete

>  {"timestamp": "2021-11-28T03:45:40.609120+0100", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "43392d40649165a4", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": null, "remoteAddress": "ipv4:10.99.2.14:49533", "serviceDescription": "Kerberos KDC", "authDescription": "ENC-TS Pre-authentication", "clientDomain": null, "clientAccount": "PMG$@LAPIOLE.ORG", "workstation": null, "becameAccount": "PMG$", "becameDomain": "LAPIOLE", "becameSid": "S-1-5-21-3157880385-2929606428-1306126165-1132", "mappedAccount": "PMG$", "mappedDomain": "LAPIOLE", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "aes256-cts-hmac-sha1-96", "duration": 2538}}
>  {"timestamp": "2021-11-28T03:45:41.392574+0100", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "923e989d452e134b", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": null, "remoteAddress": "ipv4:10.99.2.14:59868", "serviceDescription": "Kerberos KDC", "authDescription": "ENC-TS Pre-authentication", "clientDomain": null, "clientAccount": "PMG$@LAPIOLE.ORG", "workstation": null, "becameAccount": "PMG$", "becameDomain": "LAPIOLE", "becameSid": "S-1-5-21-3157880385-2929606428-1306126165-1132", "mappedAccount": "PMG$", "mappedDomain": "LAPIOLE", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "aes256-cts-hmac-sha1-96", "duration": 2792}}
>  {"timestamp": "2021-11-28T03:46:19.745210+0100", "type": "Authorization", "Authorization": {"version": {"major": 1, "minor": 1}, "localAddress": "ipv4:10.99.3.15:3268", "remoteAddress": "ipv4:10.99.6.10:45862", "serviceDescription": "LDAP", "authType": "krb5", "domain": "LAPIOLE", "account": "ADM$", "sid": "S-1-5-21-3157880385-2929606428-1306126165-1108", "sessionId": "746eb2a7-936a-42f6-8470-5b1308452a6a", "logonServer": "DC3", "transportProtection": "SEAL", "accountFlags": "0x00000280"}}
>  {"timestamp": "2021-11-28T03:46:23.768625+0100", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "9ffc897b6328e893", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": null, "remoteAddress": "ipv4:10.99.4.21:57341", "serviceDescription": "Kerberos KDC", "authDescription": "ENC-TS Pre-authentication", "clientDomain": null, "clientAccount": "PAPERLESS$@LAPIOLE.ORG", "workstation": null, "becameAccount": "PAPERLESS$", "becameDomain": "LAPIOLE", "becameSid": "S-1-5-21-3157880385-2929606428-1306126165-1207", "mappedAccount": "PAPERLESS$", "mappedDomain": "LAPIOLE", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "aes256-cts-hmac-sha1-96", "duration": 2502}}
>  {"timestamp": "2021-11-28T03:46:25.791054+0100", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4625, "logonId": "ac851cd7391de0b5", "logonType": 3, "status": "NT_STATUS_WRONG_PASSWORD", "localAddress": null, "remoteAddress": "ipv4:10.99.4.21:48236", "serviceDescription": "Kerberos KDC", "authDescription": "ENC-TS Pre-authentication", "clientDomain": null, "clientAccount": "PAPERLESS$@LAPIOLE.ORG", "workstation": null, "becameAccount": "PAPERLESS$", "becameDomain": "LAPIOLE", "becameSid": "S-1-5-21-3157880385-2929606428-1306126165-1207", "mappedAccount": "PAPERLESS$", "mappedDomain": "LAPIOLE", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "aes256-cts-hmac-sha1-96", "duration": 2124}}
>  {"timestamp": "2021-11-28T03:46:27.025969+0100", "type": "Authentication", "Authentication": {"version": {"major": 1, "minor": 2}, "eventId": 4624, "logonId": "fb184b8870d987ac", "logonType": 3, "status": "NT_STATUS_OK", "localAddress": null, "remoteAddress": "ipv4:10.99.3.18:38655", "serviceDescription": "Kerberos KDC", "authDescription": "ENC-TS Pre-authentication", "clientDomain": null, "clientAccount": "ZMSTORE$@LAPIOLE.ORG", "workstation": null, "becameAccount": "ZMSTORE$", "becameDomain": "LAPIOLE", "becameSid": "S-1-5-21-3157880385-2929606428-1306126165-1180", "mappedAccount": "ZMSTORE$", "mappedDomain": "LAPIOLE", "netlogonComputer": null, "netlogonTrustAccount": null, "netlogonNegotiateFlags": "0x00000000", "netlogonSecureChannelType": 0, "netlogonTrustAccountSid": null, "passwordType": "aes256-cts-hmac-sha1-96", "duration": 2183}}

Actions: View

Attachments on bug 14920: 17029 | 17030 | 17031