SSH Tectia

Appendix C Audit Messages

This appendix lists the audit messages generated by the server.

100 Server_starting

Level: notice

Origin: SSH Tectia Server

The server is starting.

Default log facility: daemon

101 Server_start_failed

Level: error

Origin: SSH Tectia Server

The server has encountered a fatal error condition and cannot proceed.

Default log facility: daemon

ArgumentDescription
Success | Error Error code
Text Description of the error

102 Server_running

Level: notice

Origin: SSH Tectia Server

The server has started and is running normally.

Default log facility: daemon

103 Server_stopping

Level: notice

Origin: SSH Tectia Server

The server is shutting down.

Default log facility: daemon

104 Server_exiting

Level: notice

Origin: SSH Tectia Server

The server is exiting.

Default log facility: daemon

105 Server_reconfig_started

Level: informational

Origin: SSH Tectia Server

The server is starting the reconfiguration operation

Default log facility: daemon

ArgumentDescription
File name The name of the configuration file

106 Server_reconfig_finished

Level: notice

Origin: SSH Tectia Server

The server reconfiguration has finished.

Default log facility: daemon

ArgumentDescription
Success | Error Success or error code
Text Textual description of the error

107 Server_listener_started

Level: notice

Origin: SSH Tectia Server

The server successfully established a listener socket.

Default log facility: daemon

ArgumentDescription
Listener Address of the listener socket
Listener Port Port of the listener socket

108 Server_listener_stopped

Level: notice

Origin: SSH Tectia Server

The server closed a listener socket.

Default log facility: daemon

ArgumentDescription
Listener Address of the listener socket
Listener Port Port of the listener socket

109 Server_listener_failed

Level: warning

Origin: SSH Tectia Server

The server failed to open a listener socket.

Default log facility: daemon

ArgumentDescription
Listener Address of the listener socket
Listener Port Port of the listener socket

110 Servant_exited

Level: warning

Origin: SSH Tectia Server

A servant has exited, possibly because of an error.

Default log facility: daemon

ArgumentDescription
Pid Process ID of the servant
Success | Error Success or error code
Exit Value Exit value of the servant process

111 Servant_error

Level: warning

Origin: SSH Tectia Server

A servant reported an unrecoverable error

Default log facility: daemon

ArgumentDescription
Pid Process ID of the servant
Text Textual error message

112 Server_error

Level: warning

Origin: SSH Tectia Server

The crypto library FIPS status was changed in reconfiguration.

Default log facility: daemon

ArgumentDescription
Text Verbose description of the error

113 Server_warning

Level: warning

Origin: SSH Tectia Server

The server encountered a non-fatal error.

Default log facility: daemon

ArgumentDescription
Text Description of the error

114 Servant_warning

Level: warning

Origin: SSH Tectia Server

The server encountered a non-fatal error condition.

Default log facility: daemon

ArgumentDescription
Text Verbose warning message
Session-Id Session identifier, if available

115 Servant_info

Level: informational

Origin: SSH Tectia Server

The server encountered a non-error condition of interest.

Default log facility: daemon

ArgumentDescription
Text Verbose informational message
Session-Id Session identifier, if available

116 Servant_client_verbose

Level: notice

Origin: SSH Tectia Server

The Client sent a high priority debug message.

Default log facility: daemon

ArgumentDescription
Text Client debug message
Session-Id Session identifier

117 Servant_client_debug

Level: informational

Origin: SSH Tectia Server

The Client sent a low priority debug message.

Default log facility: daemon

ArgumentDescription
Text Client debug message
Session-Id Session identifier

400 Connect

Level: security-success

Origin: SSH Tectia Server

The server initially accepted an incoming connection.

Default log facility: normal

ArgumentDescription
Policy name Symbolic name for the connection policy definition in the server configuration (optional)
Src Remote hostname
Src IP Remote IP address
Dst IFace Local interface ID
Dst IP Local IP address
Src Port Remote port
Dst Port Local port
Ver Client's version string
Session-Id Session id

401 Connection_denied

Level: security-failure

Origin: SSH Tectia Server

Connection was denied because because an error occurred during version negotiation.

Default log facility: normal

ArgumentDescription
Success | Error Reason for the connection being denied
Src IP Remote IP address
Dst IFace Local interface ID
Dst IP Local IP address
Src Port Remote port
Dst Port Local port.
Text Additional human-readable info.

402 Disconnect

Level: informational

Origin: SSH Tectia Server

The connection has closed.

Default log facility: normal

ArgumentDescription
Reason Reason for disconnect
Src Remote hostname
Src IP Remote IP address
Dst IFace Local interface ID
Dst IP Local IP address
Src Port Remote port
Dst Port Local port
Text Textual description of the disconnect reason
Session-Id Session identifier

410 Login_success

Level: security-success

Origin: SSH Tectia Server

The user has logged in after successful authentication, account validity and other checks.

Default log facility: normal

ArgumentDescription
Username The user's login name
Src Remote hostname
Src IP Remote IP address
Dst IFace Local interface ID
Dst IP Local IP address
Src Port Remote port
Dst Port Local port
Ver Client's version string
Session-Id Session identifier

411 Login_failure

Level: security-failure

Origin: SSH Tectia Server

An unsuccessful login attempt was made to the server.

Default log facility: normal

ArgumentDescription
Username The user's login name
Reason Reason for disconnect
Src Remote hostname
Src IP Remote IP address
Dst IFace Local interface ID
Dst IP Local IP address
Src Port Remote port
Dst Port Local port
Text Textual description of the disconnect reason
Session-Id Session identifier

412 Logout

Level: informational

Origin: SSH Tectia Server

The user has logged out.

Default log facility: normal

ArgumentDescription
Username The user's login name
Reason Reason for disconnect
Src Remote hostname
Src IP Remote IP address
Dst IFace Local interface ID
Dst IP Local IP address
Src Port Remote port
Dst Port Local port
Text Textual description of the disconnect reason
Session-Id Session identifier

420 Session_channel_open

Level: informational

Origin: SSH Tectia Server

A session channel opening has completed successfully or unsuccessfully.

Default log facility: normal

ArgumentDescription
Username User's login name
Success | Error Success or error description
Command The requested command
Sub ID Channel number
Session-Id Session identifier

421 Session_channel_close

Level: informational

Origin: SSH Tectia Server

A session channel has closed.

Default log facility: normal

ArgumentDescription
Username User's login name
Sub ID Channel number
Session-Id Session identifier

422 Forwarding_channel_open

Level: informational

Origin: SSH Tectia Server

A TCP forwarding channel request to the client has completed successfully or unsuccessfully.

Default log facility: normal

ArgumentDescription
Username User's login name
Success | Error Success or error description
Tunnel type "Server to client"
Src IP Originator's IP address
Src Port Originator's port
Listener IP Receiving listener address
Listener Port Receiving listener port
Sub ID Channel number
Session-Id Session identifier

423 Forwarding_channel_close

Level: informational

Origin: SSH Tectia Server

A TCP forwarding channel has closed.

Default log facility: normal

ArgumentDescription
Username User's login name
Sub ID Channel number
Session-Id Session identifier

424 Auth_channel_open

Level: informational

Origin: SSH Tectia Server

An authorization agent forwarding channel opening has completed successfully or unsuccessfully.

Default log facility: normal

ArgumentDescription
Username User's login name
Sub ID Channel number
File name Path to the listener
Success | Error Success or error description
Session-Id Session identifier

425 Auth_channel_close

Level: informational

Origin: SSH Tectia Server

An authorization agent forwarding channel has closed.

Default log facility: normal

ArgumentDescription
Username User's login name
Sub ID Channel number
File name Path to the listener
Session-Id Session identifier

426 Forwarding_listener_open

Level: informational

Origin: SSH Tectia Server

A TCP forwarding listener opening has completed successfully or unsuccessfully.

Default log facility: normal

ArgumentDescription
Username User's login name
Success | Error Success or error description
Listener IP Listener's IP address
Listener Port Listener's port
Session-Id Session identifier
Text Error description

427 Forwarding_listener_close

Level: informational

Origin: SSH Tectia Server

A TCP forwarding listener has been closed.

Default log facility: normal

ArgumentDescription
Username User's login name
Listener IP Listener's IP address
Listener Port Listener's port
Session-Id Session identifier

428 Auth_listener_open

Level: informational

Origin: SSH Tectia Server

An authorization agent forwarding listener opening has completed successfully or unsuccessfully.

Default log facility: normal

ArgumentDescription
Username User's login name
File name Path to the listener
Success | Error Success or error description
Session-Id Session identifier

429 Auth_listener_close

Level: informational

Origin: SSH Tectia Server

An authorization agent forwarding listener has closed.

Default log facility: normal

ArgumentDescription
Username User's login name
File name Path to the listener
Session-Id Session identifier

430 Channel_open_failure

Level: informational

Origin: SSH Tectia Server

Opening a channel has failed, because the other end has returned a failure.

Default log facility: normal

ArgumentDescription
Username User's login name
Sub ID Channel number
Failure code Error code from the other end
Text Textual description of the error from the other end.
Session-Id Session identifier

431 X11_listener_open

Level: informational

Origin: SSH Tectia Server

An X11 forwarding listener opening has completed successfully or unsuccessfully.

Default log facility: normal

ArgumentDescription
Username User's login name
Display Display name
Success | Error Success or error description
Text Textual description of the error (optional)
Session-Id Session identifier

432 X11_listener_close

Level: informational

Origin: SSH Tectia Server

An X11 forwarding listener has closed.

Default log facility: normal

ArgumentDescription
Username User's login name
Display Display name
Session-Id Session identifier

433 X11_channel_open

Level: informational

Origin: SSH Tectia Server

An X11 forwarding channel opening has completed successfully or unsuccessfully.

Default log facility: normal

ArgumentDescription
Username User's login name
Sub ID Channel number
Display Display name
Success | Error Success or error description
Text Extra textual information (optional)
Session-Id Session identifier

434 X11_channel_close

Level: informational

Origin: SSH Tectia Server

An X11 forwarding channel has closed.

Default log facility: normal

ArgumentDescription
Username User's login name
Sub ID Channel number
Session-Id Session identifier

460 Session_env_request_failure

Level: informational

Origin: SSH Tectia Server

A session channel request to set an environment variable has failed.

Default log facility: normal

ArgumentDescription
Username User's login name
Success | Error Success or error description
Text Description of the error
Sub ID Channel number
Session-Id Session identifier

461 Session_env_file_failure

Level: informational

Origin: SSH Tectia Server

When reading the user's environment file, an illegal environment variable was encountered.

Default log facility: normal

ArgumentDescription
Username User's login name
Success | Error Success or error description
File name Environment file name
Text Description of the error
Session-Id Session identifier

700 Auth_method_success

Level: informational

Origin: SSH Tectia Server

An authentication method was successfully completed.

Default log facility: auth

ArgumentDescription
Username User's login name
Auth method Authentication method's name
Session-Id Session identifier

701 Auth_method_failure

Level: informational

Origin: SSH Tectia Server

An authentication method failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Auth method Authentication method's name
Session-Id Session identifier

702 Auth_methods_completed

Level: informational

Origin: SSH Tectia Server

Authentication was successful. Display authentication methods and client details.

Default log facility: auth

ArgumentDescription
Username User's login name
Auth methods Completed auth methods
Src IP Client IP address
Src Port Client port
Ver Client protocol version string
Session-Id Session identifier.

703 Auth_methods_available

Level: informational

Origin: SSH Tectia Server

The list of authentication methods still available for the user

Default log facility: auth

ArgumentDescription
Username User's login name
Auth methods A list of available authentication methods
Session-Id Session identifier

705 Auth_error

Level: warning

Origin: SSH Tectia Server

An error occurred during authentication.

Default log facility: auth

ArgumentDescription
Username User's login name
Text Textual description of the error
Session-Id Session identifier

706 Auth_warning

Level: informational

Origin: SSH Tectia Server

Something abnormal happened during authentication, but authentication can still continue.

Default log facility: auth

ArgumentDescription
Username User's login name
Text Textual description of the error
Session-Id Session identifier

707 Publickey_auth_success

Level: informational

Origin: SSH Tectia Server

The user successfully completed the publickey authentication method.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'publickey'
Text Acceptance description, includes key fingerprint
Session-Id Session identifier

708 Publickey_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the publickey authentication method. This means that the current user authentication attempt with the publickey method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'publickey'
Text Error description
Session-Id Session identifier

709 Publickey_auth_warning

Level: informational

Origin: SSH Tectia Server

Warning during the publickey authentication method. This means that something abnormal happened during the publickey method, but the method may still complete successfully.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'publickey'
Text Warning description
Session-Id Session identifier

711 Hostbased_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the hostbased authentication method. This means that the current user authentication attempt with the hostbased method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

712 Hostbased_auth_warning

Level: informational

Origin: SSH Tectia Server

Warning during the hostbased authentication method. This means that something abnormal happened during the hostbased authentication method, but the method may still complete successfully.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Warning description
Session-Id Session identifier

714 Password_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the password authentication method. This means that the current user authentication attempt with the password method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'password'
Text Error description
Session-Id Session identifier

715 Password_auth_warning

Level: informational

Origin: SSH Tectia Server

Warning during the password authentication method. This means that something abnormal happened in the password method, but the method may still complete successfully.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'password'
Text Warning description
Session-Id Session identifier

716 Keyboard_interactive_pam_auth_success

Level: informational

Origin: SSH Tectia Server

The user successfully completed the Keyboard-interactive PAM authentication method.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'Keyboard-interactive PAM'
Text Acceptance description
Session-Id Session identifier

717 Keyboard_interactive_pam_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the Keyboard-interactive PAM authentication method. This means that the current user authentication attempt with the Keyboard-interactive PAM method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

718 Keyboard_interactive_pam_auth_warning

Level: informational

Origin: SSH Tectia Server

Warning during the keyboard-interactive PAM authentication method. This means that something abnormal happened, but the method may still complete successfully.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

719 Keyboard_interactive_radius_auth_success

Level: informational

Origin: SSH Tectia Server

The user successfully completed the Keyboard-interactive Radius authentication method.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'Keyboard-interactive Radius'
Text Acceptance description
Session-Id Session identifier

720 Keyboard_interactive_radius_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the Keyboard-interactive Radius authentication method. This means that the current user authentication attempt with the Keyboard-interactive Radius method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

722 Keyboard_interactive_password_auth_success

Level: informational

Origin: SSH Tectia Server

The user successfully completed the Keyboard-interactive Password authentication method.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'Keyboard-interactive Password'
Text Acceptance description
Session-Id Session identifier

723 Keyboard_interactive_password_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the Keyboard-interactive password authentication method. This means that the current user authentication attempt with the Keyboard-interactive password method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

725 Keyboard_interactive_securid_auth_success

Level: informational

Origin: SSH Tectia Server

The user successfully completed the Keyboard-interactive SecurID authentication method.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'Keyboard-interactive SecurID'
Text Acceptance description
Session-Id Session identifier

726 Keyboard_interactive_securid_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the Keyboard-interactive SecurID authentication method. This means that the current user authentication attempt with the Keyboard-interactive SecurID method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

727 Keyboard_interactive_securid_auth_warning

Level: informational

Origin: SSH Tectia Server

Warning during the Keyboard-interactive SecurID authentication method. This means that something abnormal happened during the Keyboard-interactive SecurID authentication method, but the method may still complete successfully.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Warning description
Session-Id Session identifier

728 GSSAPI_auth_success

Level: informational

Origin: SSH Tectia Server

The user successfully completed the GSSAPI authentication method.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'GSSAPI'
Text Acceptance description
Session-Id Session identifier

729 GSSAPI_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the GSSAPI authentication method. This means that the current user authentication attempt with the GSSAPI method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

730 GSSAPI_auth_warning

Level: informational

Origin: SSH Tectia Server

Warning during the GSSAPI authentication method. This means that something abnormal happened during the GSSAPI authentication method, but the method may still complete successfully.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Warning description
Session-Id Session identifier

731 Keyboard_interactive_aix_lam_auth_success

Level: informational

Origin: SSH Tectia Server

The user successfully completed the Keyboard-interactive AIX LAM authentication method.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm 'Keyboard-interactive AIX LAM'
Text Acceptance description
Session-Id Session identifier

732 Keyboard_interactive_aix_lam_auth_error

Level: warning

Origin: SSH Tectia Server

Error in the Keyboard-interactive AIX LAM authentication method. This means that the current user authentication attempt with the Keyboard-interactive AIX LAM method has failed.

Default log facility: auth

ArgumentDescription
Username User's login name
Algorithm Authentication method name
Text Error description
Session-Id Session identifier

800 Rule_engine_failure

Level: error

Origin: SSH Tectia Server

An internal error occurred in rule engine.

Default log facility: normal

ArgumentDescription
Username The user's login name, if available.
Policy name Current authentication- or rule-element's symbolic name, if available.
Text Textual representation of the error.
Session-Id Session id, if available.
Text Authentication block line information.

801 Authentication_block_selected

Level: informational

Origin: SSH Tectia Server

The server selected an authentication block in the configuration.

Default log facility: normal

ArgumentDescription
Username The user's login name
Policy name A symbolic name for the authentication block
Session-Id Session identifier
Text Authentication block line information.

802 Authentication_block_allow

Level: informational

Origin: SSH Tectia Server

The authentication chain terminated into an authentication block with an allow action.

Default log facility: normal

ArgumentDescription
Username The user's login name
Policy name A symbolic name for the authentication block
Session-Id Session identifier
Text Authentication block line information.

803 Authentication_block_deny

Level: informational

Origin: SSH Tectia Server

The authentication chain terminated into an authentication block with a deny action.

Default log facility: normal

ArgumentDescription
Username The user's login name
Policy name A symbolic name for the authentication block
Session-Id Session identifier
Text Authentication block line information.

804 Group_selected

Level: informational

Origin: SSH Tectia Server

The connection matched a group in the configuration.

Default log facility: normal

ArgumentDescription
Username The user's login name
Policy name A symbolic name for the group
Session-Id Session identifier

805 Rule_selected

Level: informational

Origin: SSH Tectia Server

The server selected a rule in the configuration.

Default log facility: normal

ArgumentDescription
Username The user's login name
Policy name A symbolic name for the rule
Session-Id Session identifier
Text Authentication block line information.

806 Rule_engine_warning

Level: warning

Origin: SSH Tectia Server

A non-fatal error has occurred in the rule engine.

Default log facility: normal

ArgumentDescription
Text The warning message.

1000 KEX_failure

Level: warning

Origin: SSH Tectia Server, Connection Broker

The key exchange failed.

Default log facility: normal

ArgumentDescription
Username User's login name (not present for first KEX)
Algorithm KEX algorithm name (not present if failure happens before choosing the algorithm)
Text Error description
Session-Id Session identifier

1001 Algorithm_negotiation_failure

Level: warning

Origin: SSH Tectia Server, Connection Broker

Algorithm negotiation failed - there was no common algorithm in the client's and server's lists.

Default log facility: normal

ArgumentDescription
Username User's login name (not present for first KEX)
Algorithm Algorithm type
Client algorithms Client's algorithm list
Server algorithms Server's algorithm list
Session-Id Session identifier

1002 Algorithm_negotiation_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

Algorithm negotiation succeeded.

Default log facility: normal

ArgumentDescription
Username User's login name (not present for first KEX)
Text Negotiated algorithms
Session-Id Session identifier

1003 KEX_success

Level: informational

Origin: SSH Tectia Server

Key-exchange was successful.

Default log facility: normal

ArgumentDescription
Session-Id Session identifier.
Protocol-session-Id Protocol session identifier.

1100 Certificate_validation_failure

Level: informational

Origin: SSH Tectia Server, Connection Broker

A received certificate failed to validate correctly under any of the configured CAs.

Default log facility: normal

ArgumentDescription
Username User's login name (not present for first KEX)
Text Resulting search states for all configured CAs.
Session-Id Session identifier

1101 Certificate_validation_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

A received certificate validated correctly under one or more configured CAs.

Default log facility: normal

ArgumentDescription
Username User's login name
CA List A list of CAs under which the user's certificate validated correctly.
Session-Id Session identifier

1110 CM_find_started

Level: informational

Origin: SSH Tectia Server, Connection Broker

A low-level search was started in the certificate validation subsystem.

Default log facility: normal

ArgumentDescription
Ctx Search context
Search constraints Search constraints.

1111 CM_find_finished

Level: informational

Origin: SSH Tectia Server, Connection Broker

A low-level find operation has finished in the certificate validation subsystem.

Default log facility: normal

ArgumentDescription
Ctx Context pointer that identifies the search

1112 CM_cert_not_in_search_interval

Level: informational

Origin: SSH Tectia Server, Connection Broker

The certificate is not valid during the required time period.

Default log facility: normal

ArgumentDescription
SubjectName Subject name of the certificate
Text Error description
Ctx Search context

1113 CM_certificate_revoked

Level: informational

Origin: SSH Tectia Server, Connection Broker

A certificate was found to be revoked.

Default log facility: normal

ArgumentDescription
SubjectName Subject name of the certificate
Ctx The context pointer of the search

1114 CM_cert_search_constraint_mismatch

Level: informational

Origin: SSH Tectia Server, Connection Broker

The certificate did not satisfy the constraints set for the search.

Default log facility: normal

ArgumentDescription
SubjectName Subject name of the certificate
Text Description of the mismatch
Ctx Search context

1115 CM_ldap_search_started

Level: informational

Origin: SSH Tectia Server, Connection Broker

An LDAP search for a CRL or a sub-CA is being started.

Default log facility: normal

ArgumentDescription
Text Search details

1116 CM_ldap_search_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

An LDAP search for a CRL or a sub-CA completed successfully.

Default log facility: normal

ArgumentDescription
Text Search details

1117 CM_ldap_search_failure

Level: informational

Origin: SSH Tectia Server, Connection Broker

The attempt to contact an LDAP server was unsuccessful.

Default log facility: normal

ArgumentDescription
Text Error details

1118 CM_http_search_started

Level: informational

Origin: SSH Tectia Server, Connection Broker

The certificate validation subsystem is initiating a search for a CRL or a sub-CA through the HTTP protocol.

Default log facility: normal

ArgumentDescription
Text Search target

1119 CM_http_search_success

Level: informational

Origin: SSH Tectia Server, Connection Broker

An HTTP request for a CRL or a sub-CA completed successfully.

Default log facility: normal

ArgumentDescription
Text Status message detailing what was being retrieved

1120 CM_http_search_failure

Level: informational

Origin: SSH Tectia Server, Connection Broker

An HTTP request for a CRL or a sub-CA failed.

Default log facility: normal

ArgumentDescription
Text Error details

1121 CM_crl_added

Level: informational

Origin: SSH Tectia Server, Connection Broker

A new CRL was successfully added to the certificate validation subsystem.

Default log facility: normal

ArgumentDescription
Text CRL's issuer and validity period

1200 Key_store_create

Level: informational

Origin: SSH Tectia Server, Connection Broker

Key store created.

Default log facility: normal

1201 Key_store_create_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

Key store creation failed.

Default log facility: normal

1202 Key_store_destroy

Level: informational

Origin: SSH Tectia Server, Connection Broker

Key store destroyed.

Default log facility: normal

1204 Key_store_add_provider

Level: informational

Origin: SSH Tectia Server, Connection Broker

Added a provider to the key store.

Default log facility: normal

ArgumentDescription
Type Provider type

1205 Key_store_add_provider_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

Adding a provider to the key store failed.

Default log facility: normal

ArgumentDescription
Type Provider type
EK error Error message

1206 Key_store_remove_provider

Level: informational

Origin: SSH Tectia Server, Connection Broker

Removed a provider from the key store.

Default log facility: normal

ArgumentDescription
Init info Provider name

1208 Key_store_decrypt

Level: informational

Origin: SSH Tectia Server, Connection Broker

A key was used successfully for decryption.

Default log facility: normal

ArgumentDescription
Key path Key path
Fwd path Fwd path

1209 Key_store_decrypt_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

A key was used unsuccessfully for decryption.

Default log facility: normal

ArgumentDescription
Key path Key path
Fwd path Fwd path
Crypto error Error string

1210 Key_store_sign

Level: informational

Origin: SSH Tectia Server, Connection Broker

A key was used successfully for signing.

Default log facility: normal

ArgumentDescription
Key path Key path
Fwd path Fwd path

1211 Key_store_sign_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

A key was used unsuccessfully for signing.

Default log facility: normal

ArgumentDescription
Key path Key path
Fwd path Fwd path
Crypto error Error string

1212 Key_store_sign_digest

Level: informational

Origin: SSH Tectia Server, Connection Broker

A key was used successfully for signing a digest.

Default log facility: normal

ArgumentDescription
Key path Key path
Fwd path Fwd path

1213 Key_store_sign_digest_failed

Level: warning

Origin: SSH Tectia Server, Connection Broker

A key was used unsuccessfully for signing a digest.

Default log facility: normal

ArgumentDescription
Key path Key path
Fwd path Fwd path
Crypto error Error string

1214 Key_store_ek_provider_failure

Level: warning

Origin: SSH Tectia Server, Connection Broker

External key provider failure.

Default log facility: normal

ArgumentDescription
Key path Key path
Text Key label

1300 Channel_inbound_statistics

Level: informational

Origin: Connection Broker, SSH Tectia Server

Statistics for the inbound side of a channel (traffic arriving from the network)

Default log facility: normal

ArgumentDescription
Username User's login name
Session-Id Session identifier
Channel Id Local channel id
Packet count Protocol packet count
Packet size Average protocol packet payload size

1301 Channel_outbound_statistics

Level: informational

Origin: Connection Broker, SSH Tectia Server

Statistics for the outbound side of a channel (traffic going to the network)

Default log facility: normal

ArgumentDescription
Username User's login name
Session-Id Session identifier
Channel Id Local channel id
Packet count Protocol packet count
Packet size Average protocol packet payload size
Packet size Final size of outbound channel buffer

2000 Sft_server_starting

Level: notice

Origin: SSH Tectia Secure File Transfer

The SFT server is starting.

Default log facility: daemon

ArgumentDescription
Username Username
Session-Id Session ID

2001 Sft_server_stopping

Level: notice

Origin: SSH Tectia Secure File Transfer

The SFT server is stopping.

Default log facility: daemon

ArgumentDescription
Username Username
Session-Id Session ID

2002 Sft_server_connected

Level: informational

Origin: SSH Tectia Secure File Transfer

The connection to SFT server was accepted.

Default log facility: daemon

ArgumentDescription
Session-Id Session ID

2003 Sft_server_disconnected

Level: informational

Origin: SSH Tectia Secure File Transfer

The connection to SFT server was disconnected.

Default log facility: daemon

ArgumentDescription
Session-Id Session ID

2004 Sft_server_fxp_request

Level: informational

Origin: SSH Tectia Secure File Transfer

Invalid SFT protocol message was received.

Default log facility: daemon

ArgumentDescription
Request type Request type
Request ID Request ID
Text Error message
Session-Id Session ID

2005 Sft_server_fxp_unknown

Level: notice

Origin: SSH Tectia Secure File Transfer

Unknown SFT protocol message was received.

Default log facility: daemon

ArgumentDescription
Request type Request type
Request ID Request id
Session-Id Session ID

2006 Sft_server_fxp_version

Level: notice

Origin: SSH Tectia Secure File Transfer

SFT protocol version was negotiated.

Default log facility: daemon

ArgumentDescription
Negotiated version Negotiated protocol version
Session-Id Session ID

2007 Sft_server_open_file

Level: notice

Origin: SSH Tectia Secure File Transfer

File OPEN was successful.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2008 Sft_server_open_file_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File OPEN failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2010 Sft_server_read_file_failed

Level: informational

Origin: SSH Tectia Secure File Transfer

File READ failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2012 Sft_server_write_file_failed

Level: informational

Origin: SSH Tectia Secure File Transfer

File WRITE failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2013 Sft_server_close_file

Level: informational

Origin: SSH Tectia Secure File Transfer

File CLOSE was successful.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2014 Sft_server_close_file_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File CLOSE failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2015 Sft_server_stat_file

Level: informational

Origin: SSH Tectia Secure File Transfer

File STAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2016 Sft_server_stat_file_failed

Level: informational

Origin: SSH Tectia Secure File Transfer

File STAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2017 Sft_server_lstat_file

Level: informational

Origin: SSH Tectia Secure File Transfer

File LSTAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2018 Sft_server_lstat_file_failed

Level: informational

Origin: SSH Tectia Secure File Transfer

File LSTAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2019 Sft_server_fstat_file

Level: informational

Origin: SSH Tectia Secure File Transfer

File FSTAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2020 Sft_server_fstat_file_failed

Level: informational

Origin: SSH Tectia Secure File Transfer

File FSTAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2021 Sft_server_setstat_file

Level: notice

Origin: SSH Tectia Secure File Transfer

File SETSTAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2022 Sft_server_setstat_file_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File SETSTAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2023 Sft_server_fsetstat_file

Level: notice

Origin: SSH Tectia Secure File Transfer

File FSETSTAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2024 Sft_server_fsetstat_file_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File FSETSTAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2025 Sft_server_remove_file

Level: notice

Origin: SSH Tectia Secure File Transfer

File REMOVE was successful.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2026 Sft_server_remove_file_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File REMOVE failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2027 Sft_server_rename_file

Level: notice

Origin: SSH Tectia Secure File Transfer

File was renamed.

Default log facility: daemon

ArgumentDescription
Old file name Old file name
New file name New file name
Text Audit message
Session-Id Session ID

2028 Sft_server_rename_file_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File RENAME failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2029 Sft_server_symlink

Level: informational

Origin: SSH Tectia Secure File Transfer

Symlink was created.

Default log facility: daemon

ArgumentDescription
Link name Link name
Target name Target name
Text Audit message
Session-Id Session ID

2030 Sft_server_symlink_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File/directory SYMLINK failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2031 Sft_server_readlink

Level: informational

Origin: SSH Tectia Secure File Transfer

Symlink was resolved.

Default log facility: daemon

ArgumentDescription
Link name Link name
Target name Resolved target name
Text Audit message
Session-Id Session ID

2032 Sft_server_readlink_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File/directory READLINK failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2033 Sft_server_realpath

Level: informational

Origin: SSH Tectia Secure File Transfer

File name was resolved.

Default log facility: daemon

ArgumentDescription
File name File name
Path Resolved file name
Text Audit message
Session-Id Session ID

2034 Sft_server_realpath_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File/directory REALPATH failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2035 Sft_server_digest

Level: informational

Origin: SSH Tectia Secure File Transfer

SFT server calculated digest.

Default log facility: daemon

ArgumentDescription
File name File name
Offset File offset
Length Length of the file data for digest calculation
Digest Calculated digest
Session-Id Session ID

2036 Sft_server_digest_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File DIGEST failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2037 Sft_server_open_dir

Level: notice

Origin: SSH Tectia Secure File Transfer

Directory OPEN was successful.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
File handle File handle
Text Audit message
Session-Id Session ID

2038 Sft_server_open_dir_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

Directory OPEN failed.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
Text Audit message
Session-Id Session ID

2039 Sft_server_close_dir

Level: informational

Origin: SSH Tectia Secure File Transfer

Directory CLOSE was successful.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
File handle File handle
Text Audit message
Session-Id Session ID

2040 Sft_server_close_dir_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

Directory CLOSE failed.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
File handle File handle
Text Audit message
Session-Id Session ID

2041 Sft_server_create_dir

Level: notice

Origin: SSH Tectia Secure File Transfer

Directory CREATE was successful.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
Text Audit message
Session-Id Session ID

2042 Sft_server_create_dir_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

Directory CREATE failed.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
Text Audit message
Session-Id Session ID

2043 Sft_server_remove_dir

Level: notice

Origin: SSH Tectia Secure File Transfer

Directory REMOVE was successful.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
Text Audit message
Session-Id Session ID

2044 Sft_server_remove_dir_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

Directory REMOVE failed.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
Text Audit message
Session-Id Session ID

2045 Sft_server_read_dir

Level: informational

Origin: SSH Tectia Secure File Transfer

Directory READ was successful.

Default log facility: daemon

ArgumentDescription
Directory name Directory name
File handle File handle
Text Audit message
Session-Id Session ID

2046 Sft_server_read_dir_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

Directory READ failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2047 Sft_server_stream_read

Level: informational

Origin: SSH Tectia Secure File Transfer

File read stream was initiated.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Path Path to socket file
Offset File offset
Length File transfer limit in bytes
Session-Id Session ID

2048 Sft_server_stream_read_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File STREAM READ failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2049 Sft_server_stream_write

Level: informational

Origin: SSH Tectia Secure File Transfer

File write stream was initiated.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Path Path to socket file
Offset File offset
Length File transfer limit in bytes
Session-Id Session ID

2050 Sft_server_stream_write_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File STREAM WRITE failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2051 Sft_server_stream_cancel

Level: informational

Origin: SSH Tectia Secure File Transfer

File STREAM CANCEL was successful.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2052 Sft_server_stream_cancel_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File STREAM CANCEL failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2053 Sft_server_stream_wait

Level: informational

Origin: SSH Tectia Secure File Transfer

File STREAM WAIT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2054 Sft_server_stream_wait_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File STREAM WAIT failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2055 Sft_server_download_begin

Level: notice

Origin: SSH Tectia Secure File Transfer

File download begins.

Default log facility: daemon

ArgumentDescription
File name File name
Limit File transfer limit in bytes
Session-Id Session ID

2056 Sft_server_download_end

Level: notice

Origin: SSH Tectia Secure File Transfer

File download ended.

Default log facility: daemon

ArgumentDescription
File name File name
Read Number of bytes read
Success | Error Error code
Session-Id Session ID

2057 Sft_server_upload_begin

Level: notice

Origin: SSH Tectia Secure File Transfer

File upload begins.

Default log facility: daemon

ArgumentDescription
File name File name
Limit File transfer limit in bytes
Session-Id Session ID

2058 Sft_server_upload_end

Level: notice

Origin: SSH Tectia Secure File Transfer

File upload ended.

Default log facility: daemon

ArgumentDescription
File name File name
Wrote Number of bytes written
Success | Error Error code
Session-Id Session ID

2059 Sft_server_statistics

Level: notice

Origin: SSH Tectia Secure File Transfer

File statistics.

Default log facility: daemon

ArgumentDescription
File name File name
Read Number of bytes read
Wrote Number of bytes written
Text Audit message
Session-Id Session ID

2060 Sft_server_operation_not_allowed

Level: notice

Origin: SSH Tectia Secure File Transfer

Extended SFT protocol message was received, but the operation was prohibited.

Default log facility: daemon

ArgumentDescription
Request type Request type
Request ID Request ID
Ext request type Extended request type
Text Error message
Session-Id Session ID

2061 Sft_server_operation_no_license

Level: notice

Origin: SSH Tectia Secure File Transfer

Extended SFT protocol message was received, but no suitable license was found for the operation.

Default log facility: daemon

ArgumentDescription
Request type Request type
Request ID Request ID
Ext request type Extended request type
Text Error message
Session-Id Session ID

2062 Sft_server_no_virtual_folder_dir

Level: error

Origin: SSH Tectia Secure File Transfer

Virtual folder directory does not exist.

Default log facility: daemon

ArgumentDescription
Text Virtual folder
Directory name Directory name

2065 Sft_server_stat_extended

Level: informational

Origin: SSH Tectia Secure File Transfer

File STREAM STAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2066 Sft_server_stat_extended_failed

Level: informational

Origin: SSH Tectia Secure File Transfer

File STREAM STAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2067 Sft_server_lstat_extended

Level: informational

Origin: SSH Tectia Secure File Transfer

File STREAM LSTAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2068 Sft_server_lstat_extended_failed

Level: informational

Origin: SSH Tectia Secure File Transfer

File STREAM LSTAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2069 Sft_server_setstat_extended

Level: notice

Origin: SSH Tectia Secure File Transfer

File STREAM SETSTAT was successful.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2070 Sft_server_setstat_extended_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File STREAM SETSTAT failed.

Default log facility: daemon

ArgumentDescription
File name File name
Text Audit message
Session-Id Session ID

2071 Sft_server_stream_offset

Level: notice

Origin: SSH Tectia Secure File Transfer

File STREAM OFFSET was successful.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID

2072 Sft_server_stream_offset_failed

Level: warning

Origin: SSH Tectia Secure File Transfer

File STREAM OFFSET failed.

Default log facility: daemon

ArgumentDescription
File name File name
File handle File handle
Text Audit message
Session-Id Session ID