Using the Audit Provider to log ejb security events

Question

I would like use the audit provider to log security events for ejbs that use container managed security. Specifically I want to record the name of the ejb being accessed, the method the user is accessing, the time of the event and the user name of the user who is accessing the ejb.So far I have created an ejb that has method-permissions defined in the ejb-xml file. I have a number of users with different levels of permissions and the security is working.I have also installed the example Audit class that is shipped with weblogic.I am getting Audit indo in the log file, but I do not get any ejb info being logged.Is it possible to use the Audit provider that weblogic provides to audit ejb security events? Do I need to do something special to make this work?Please help, I can not find any documentation about what the audit provider logs.

Answer 1

Actually I never tried to login into the provider, but I understand you just need the keys.
Try this code, it works for me (some pieces are missing, but this is the core)
        Provider provider=null;
     provider=new SunPKCS11(providerFile);   // providerFile is a String
     Security.addProvider(provider);
     KeyStore store=KeyStore.getInstance("PKCS11");
        char[] pin=pinAsString.toCharArray();   
     store.load(null, pin);
        PrivateKey key=(PrivateKey)store.getKey(alias, null);
        Certificate[] chain=store.getCertificateChain(alias);
        .....Using this approach I managed to read all the information from the provider (aliases, certificates, ...). I'm not sure that's what you needed, but I hope it helped.