Issues With Audit Log

AlexQuorum

Hello,

I'm a long time user of Xen Orchestra and have made great use of these forums as a resource in the past currently using the from the sources version of orchestra on commit: 8f6c0 I've noticed the audit log plugin is now reporting thousands of API calls when a user is logged in for: host.isPubKeyTooShort

I noticed this was part of the work to get ready for XCP-NG 8.3 and I've already updated the pubkey on my hosts but this is still getting spammed in the logs and is drowning out any actual use they would have to effectively audit user activity which is frustrating as they used to work fine.

Any help in turning this off or looking at chaning how this is logged would be appreciated.

julien-f

@AlexQuorum This has been fixed, thank you

https://github.com/vatesfr/xen-orchestra/commit/649add3ab363a331a65097b986628ce227b539c1

0

julien-f committed to vatesfr/xen-orchestra

fix(xo-server-audit): ignore host.isPubKeyTooShort

Fixes https://xcp-ng.org/forum/post/84464

olivierlambert

Ping @julien-f

peder

@AlexQuorum Does

openssl  x509  -noout -text -in /etc/xensource/xapi-ssl.pem | grep bit

show 2048 or more and did you remember to do a

systemctl restart xapi

after you replaced the cert?

AlexQuorum

@peder Hi Peder,

Yes it returns 2048 and I also ran the reset XAPI command (the hosts have been physically rebooted since I did it as well).

The little error icon warning about having a short pubkey is also gone since I updated the certificates.

julien-f

@AlexQuorum This has been fixed, thank you

https://github.com/vatesfr/xen-orchestra/commit/649add3ab363a331a65097b986628ce227b539c1

0

julien-f committed to vatesfr/xen-orchestra

fix(xo-server-audit): ignore host.isPubKeyTooShort

Fixes https://xcp-ng.org/forum/post/84464

AlexQuorum

@julien-f Thank you very much I've updated to the latest commit and can confirm the behaviour has stopped, the prompt fix is much appreciated.