Sample authentication terminate event
For example, the following data block is an audit record for the termination of an
authentication:
<event rev="1.4">
<date>2005-10-04-11:45:27.487-04:00I-----</date>
<outcome status="0">0</outcome>
<originator blade="webseald" instance="default">
<component rev="1.4">authn</component>
<event_id>103</event_id>
<action>103</action>
<location>cmd.wma.ibm.com</location>
</originator>
<accessor name="">
<principal auth="IV_LDAP_V3.0" domain="Default">testuser1</principal>
<name_in_rgy>cn=testuser1,dc=ibm,dc=com</name_in_rgy>
<session_id>e005b3ae-34ed-11da-a016-00096bc369d2</session_id>
<user_location>9.65.85.162</user_location>
<user_location_type>IPV4</user_location_type>
</accessor>
<target resource="7">
<object></object>
</target>
<authntype>formsPassword</authntype>
<terminateinfo>
<terminatereason>userLoggedOut</terminatereason>
</terminateinfo>
<data></data>
</event>