search

GENI-NSF / geni-portal

A UI for a GENI clearinghouse
Other
3 stars 8 forks source link

getslicecred GENI AM API call should log something when invoked by an operator #397

Closed ahelsing closed 9 years ago

ahelsing commented 9 years ago

As a test of operator credentials, i ran:

omni getslicecred s1 -r tcm-test

against panther at around 17:50. (That slice belongs to Tom.) We weren't able to find any log entry indicating that i'd taken an action with operator privileges. It would be good if privileged operations were always logged as such.

Imported from trac ticket #397, created by chaos on 02-20-2013 at 18:03, last modified: 06-27-2013 at 15:05

ahelsing commented 9 years ago

We did find this, in /var/log/geni-pgch.log:

INFO:gcf-pgch:get inside keys for 'ac3b1df8-13cf-41a1-9f46-0491c19609e1'
INFO:gcf-pgch:Found slice id 663a1abb-f90c-48a7-b43e-a13b5c46f3a3 for urn urn:publicid:IDN+panther:tcm-test+slice+s1

I believe that is my UUID and relates to this operation, but it doesn't say i used a privileged credential, and may be exactly the same message we'd see if i'd gotten a credential for my own slice.

Trac comment by chaos on 02-20-2013 at 18:03

ahelsing commented 9 years ago

putting in log in the CS to log to syslog and the ch_error.log

Trac comment by ahelsing on 06-27-2013 at 15:05