Data Item Or Resource Element Content Access Events - Novell XDASV2 - ADMINISTRATION GUIDE V1 Administration Manual

identity in domain B, which is used as a proxy for any request coming from any identity in domain
A. Trust relationships can be much more complex, however, as individual identities in domain A can
have individual associations with specific domain B identities.
Peer Association Management Events Taxonomy
Table A-6
Event Name
Create Peer
Association
Terminate Peer
Association
Query Association
Context
Modify Association
Context
Receive Data Via
Association
Send Data Via
Association
A.7 Data Item or Resource Element Content
Access Events
Resource content-access events are related to access of any data files protected by an authentication
domain. This could be file system files, database records, Web pages etc. While instrumenting
applications, consider securing access to the resources. Resource access can be a high-bandwidth
process. Therefore, only security-relevant events should be reported. Such instrumentation should
be configurable at the application level by the application administrator, thus must be policy driven.
This implies that such applications add additional infrastructure and user interface to allow
administrators to manage the resource-access events that has to be audited, and determine the
unimportant events within the security context.
26 Novell XDASv2 Administration Guide
Event Corresponding
Identifier eDir Event
0.0.5.0
0.0.5.1
0.0.5.2
0.0.5.3
0.0.5.4
0.0.5.5
Description Use
Create an This event is reported when a
association with a new peer association is created.
peer
Terminate an This event is reported when an
association with a existing peer association is
peer destroyed.
Query an This event is reported when the
association context attributes of a peer association
are queried.
Modify an This event is reported when the
association context attributes of a peer association
are modified.
Receive data via an This event is reported when data
association is received from a service in an
authentication domain
specifically via a trust
relationship or peer association.
Send data via an This event is reported when data
association is sent to a service in an
authentication domain
specifically via a trust
relationship or peer association.