03-01-2017 05:01 PM
I know that I can capture the event of a user being manually added to Alfresco though the Admin Tools page in Share by auditing for a PathMap source of "/alfresco-api/post/PersonService/createPerson".
Users are typically added by an AD LDAP synchronization, however, and I can't see what event is being triggered.
An Alfresco user IS getting created after a synch. Should I be looking for something else, like membership add to a group?
I am setting the log setting of 'org.alfresco.repo.audit.inbound' to DEBUG, but am not seeing anything for that user. Any other log settings to try?
Thanks All!
03-02-2017 04:54 AM
The same kind of API is also used during synchronisation, e.g. createPerson call is being made. Unfortunately, the person service is used in such a way that Auditing is circumvented in this use case (by using "personService" bean reference instead of "PersonService").
You could still react to the event of a person being created by using a policy which is unaffected by the choice of bean reference. A policy can be used to record your own data for Auditing. That is e.g. the way that alfresco-access works.
03-07-2017 06:14 PM
I wasn't *sigh*ing because of your problem - I was just reminded how Alfresco is sometimes adding features with only a narrow-minded view on fixing some issue, without considering the implications on other users, e.g. like yourself, that get hit with side-effects that are neither documented nor in any way easily understandable unless you look into the core code...
03-02-2017 09:58 AM
Axel,
Thanks very much!
I will a pursue behavior / policy mod that logs the event of an account being created.
Thanks also for the heads-up on the alfresco-access audit application: I will try to see how they are writing to the audit trail, as it would be ideal to have all of the audited events in one location.
Explore our Alfresco products with the links below. Use labels to filter content by product module.