Hi,
Since the upgrade in 0.11.1 we got a problem, username and user email are no longer logged. We are using Okta for the authentication, and before this upgrade we got the username and email in log of the authorize_session request but it’s no longer the case.
Could you help us ?
Regards Thibaut
Welcome to Discuss forum and thanks for being a Boundary user.
Could you please help clarify if you are not seeing the username and email in the boundary controller log or the audit log ? Also a redacted sample log would greatly help while we try to reproduce this locally.
Thanks
Pradeep
Hello,
we don’t see them in the audit log. Logs before upgrade here :
{
"id": "8VryJLyg4k",
"source": "https://hashicorp.com/boundary/ip-x.x.x.x.region.compute.internal/controller",
"specversion": "1.0",
"type": "audit",
"data": {
"id": "e_zeLFabbu1r",
"version": "v0.1",
"type": "APIRequest",
"timestamp": "2022-11-09T08:15:50.923334242Z",
"request_info": {
"id": "gtraceid_mCp1FTvRQFUuBJX0TEkK",
"method": "GET",
"path": "/v1/scopes?scope_id=o_EHIHw0QBkv",
"public_id": "at_3pdv9jkbBc",
"client_ip": "x.x.x.x"
},
"auth": {
"auth_token_id": "",
"user_info": {
"id": "u_OkB4Dnbr3G",
"auth_account_id": "acctoidc_jgTq0hN1qA"
},
"grants_info": {
"grants": [
{
"grant": "type=target;actions=list",
"scope_id": "p_6DvhVrGQHH",
"role_id": "r_4mk0Ew2Np6"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_6DvhVrGQHH",
"role_id": "r_4mk0Ew2Np6"
},
{
"grant": "id=*;type=auth-token;actions=delete:self,list,read:self",
"scope_id": "global",
"role_id": "r_yNZZuwQvFE"
},
{
"grant": "id={{account.id}};actions=change-password,read",
"scope_id": "global",
"role_id": "r_yNZZuwQvFE"
},
{
"grant": "id=*;type=auth-method;actions=authenticate,list",
"scope_id": "global",
"role_id": "r_yNZZuwQvFE"
},
{
"grant": "id=*;type=scope;actions=list,no-op",
"scope_id": "global",
"role_id": "r_yNZZuwQvFE"
},
{
"grant": "type=scope;actions=list",
"scope_id": "o_10e6JULF3q",
"role_id": "r_J9kul1mbcD"
},
{
"grant": "id={{account.id}};actions=change-password,read",
"scope_id": "o_10e6JULF3q",
"role_id": "r_J9kul1mbcD"
},
{
"grant": "id=*;type=auth-method;actions=authenticate,list",
"scope_id": "o_10e6JULF3q",
"role_id": "r_J9kul1mbcD"
},
{
"grant": "type=target;actions=list",
"scope_id": "p_HcLmIN3scU",
"role_id": "r_Cg1yNgh6re"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_HcLmIN3scU",
"role_id": "r_Cg1yNgh6re"
},
{
"grant": "type=scope;actions=list",
"scope_id": "o_EHIHw0QBkv",
"role_id": "r_3ls5kBzwd2"
},
{
"grant": "id={{account.id}};actions=change-password,read",
"scope_id": "o_EHIHw0QBkv",
"role_id": "r_3ls5kBzwd2"
},
{
"grant": "id=*;type=auth-method;actions=authenticate,list",
"scope_id": "o_EHIHw0QBkv",
"role_id": "r_3ls5kBzwd2"
},
{
"grant": "type=target;actions=list",
"scope_id": "p_rg3SEtQ7MW",
"role_id": "r_knAi2j1iJb"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_rg3SEtQ7MW",
"role_id": "r_knAi2j1iJb"
},
{
"grant": "id=*;type=*;actions=*",
"scope_id": "p_HcLmIN3scU",
"role_id": "r_E0wKTi0U04"
},
{
"grant": "type=target;actions=list",
"scope_id": "p_e1kyaA6HaP",
"role_id": "r_zHW1EmZya8"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_e1kyaA6HaP",
"role_id": "r_zHW1EmZya8"
},
{
"grant": "id=*;type=target;actions=authorize-session",
"scope_id": "p_0G26iU15h5",
"role_id": "r_EJbeIDTrX3"
},
{
"grant": "id=p_0G26iU15h5;actions=read",
"scope_id": "o_EHIHw0QBkv",
"role_id": "r_pO6LAeH0pS"
},
{
"grant": "type=target;actions=list",
"scope_id": "p_BNTDYd21iM",
"role_id": "r_vcUxmGgxAt"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_BNTDYd21iM",
"role_id": "r_vcUxmGgxAt"
},
{
"grant": "type=target;actions=list",
"scope_id": "p_e0ccmICEp1",
"role_id": "r_uffSOTklNm"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_e0ccmICEp1",
"role_id": "r_uffSOTklNm"
},
{
"grant": "type=target;actions=list",
"scope_id": "p_WFACWrEqgE",
"role_id": "r_AkSbmBC9D3"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_WFACWrEqgE",
"role_id": "r_AkSbmBC9D3"
},
{
"grant": "type=target;actions=list",
"scope_id": "p_0G26iU15h5",
"role_id": "r_BnU8aUpNVh"
},
{
"grant": "id=*;type=session;actions=cancel:self,list,read:self",
"scope_id": "p_0G26iU15h5",
"role_id": "r_BnU8aUpNVh"
},
{
"grant": "id=*;type=*;actions=*",
"scope_id": "o_EHIHw0QBkv",
"role_id": "r_MbQn6N0mAZ"
}
]
},
"email": "my.name@domain.com",
"name": "My Name"
},
As you can see at the end of the log I have the name of the user and the email. But now we have the same things grants, etc, … but without this informations.
Thanks for this information.
Also, if you can help share which version of Boundary you upgraded to 0.11.1 ?
Thanks,
Pradeep
UP. Have you got any idea ?
Regards
Thibaut