From the Audit Policy list, select Custom to configure your own filters, or one of

17-6 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory ■ Operation name and type add, delete, or modify ■ Timestamp when event occurred ■ Affected configuration type ACL, adapter, auditing, listener, logging, or server ■ Old configuration versions what was the version of the configuration before it changed ■ Exact differences between old and new versions of a configuration These configuration change-related events are audited in the WebService API layer and then recorded in the audit repository. Oracle Virtual Directory also integrates JMX technology to manage and audit configuration change operations. The JMX MBeans bypass the WebService admin API, which moves the auditing service to a lower level and enables tracking for all configuration change activities and records the operation events whether they succeed or fail.

17.2.3.1 Recording IP Addresses

The Oracle Virtual Directory configuration management classes and WebService APIs contain methods that track the IP address from where an operation was performed and pass that IP address, along with some useful security auditing information, to the audit logic.

17.2.3.2 Auditing Configuration Management Classes

For each configuration, there is a corresponding configuration management class. The configuration XML files are mapped to a management class as follows: When you make changes to a configuration, Oracle Virtual Directory records a copy of the original configuration version in the auditing repository and records the differences between the old version and the new configuration.

17.2.3.3 Reviewing Auditing Messages

Oracle Virtual Directory auditing tries to record granular changes about which configuration parameters have changed, including a record of the original value and the new value. If this information is not available, Oracle Virtual Directory records the full configuration file, including the old version and the new version, using the following conventions: Configuration XML File Auditing Configuration Management Class acls.os_xml is com.octetstring.vde.config.AclsCfg adapters.os_xml com.octetstring.vde.config.AdaptersCfg listeners.os_xml com.octetstring.vde.config.ListenersCfg server.os_xml com.octetstring.vde.config.ServerCfg Convention Description NN The DN and, if available, the IP address where the operation was performed. WHAT Name and type of the configuration changed. DD:HH Timestamp when the event occurred.