getting IP Address and object ID in logs on document upload/download

PROBLEM DESCRIPTION:
------------------------------------
Hi,

We have a customized application through which we uplaod documents and the backend server is documentum. The documents are stored in Documentum CS 6.6.

Currently we have a requirement in which we have to trace the IP ADDRESS of the user's machine which is performing the download/upload operation on the CS along with the OBJECT ID of the document and the event performed(CheckOut,CheckIn,Export,Import).

We have tried changing the dfc.properties and we are able to get the IP Address but the object ID of the document and the event is not being traced.
Kindly suggest a way out.

Thanks,
Nikhil Singhal

ENVIRONMENT INFORMATION
------------------------------------
<<Product Information>>
Product: Content Server
Version: 6.6

Server is Microsoft Srever 2008 R2

Find more posts tagged with

Comments

lastnitescurry

To ask a stupid question. Why do ye not print out the object ID via your custom application?

Nikhil_Singhal

To answer your question i would further like to clarify that why i was asking this.

There is a DA link associated with our CS and repository that can also be used to upload and download documents.

So for security reasons (in case if someone gets access to DA), we just wanted to trace any activity using log traces if in case someone goes there and try to download or upload something directly.

We have tried audit tracing but there we are not getting IP Addresses but only the login name(it can be any valid login) and the Object ID of the document. What we want to know is the IP address of the machine to trace that user.

Kindly let us know if theres any setting that can be done in the properties file (DFC or ACS) in order to get both OBJECT ID and IP Address.

We have also tried to do some changes in DFC.properties file on the Application Server(WAS) but what we are getting is a list of object id's of all the existing documents in the cabinet.

Thanks in advance

lastnitescurry

The inofrmation you want is on the Content object (set_file, set_client, set_time; see Object Reference)

Not sure off top of my head if you can add those attributes to audit of the setfile event for a type.

PanfilovAB

CS records AS's ip-address as client machine in dm_audittrail but there is a way to put real client ip-address in application_code column of dm_audittrail:

app.xml:

....................

<class>tel.panfilov.documentum.web.session.IpAddressSessionListener</class>

</dfsessionmanagereventlistener>

.....................

</application>

IpAddressSessionListener:

package tel.panfilov.documentum.web.session;

import com.documentum.fc.client.IDfSession;
import com.documentum.fc.client.IDfSessionManagerEventListener;
import com.documentum.fc.common.DfException;
import com.documentum.web.common.ClientInfoService;

/**
 * Author: Andrey B. Panfilov  * Date: 31.07.12
 * Time: 4:03
 */
public class IpAddressSessionListener implements IDfSessionManagerEventListener {

    public static final String APPLICATION_CODE_ATTR = "application_code";

    public void onSessionCreate(IDfSession session) throws DfException {
        for (int n = session.getSessionConfig().getValueCount(APPLICATION_CODE_ATTR), i = n; i > 0; i--) {
            session.getSessionConfig().remove(APPLICATION_CODE_ATTR, i - 1);
        }
        session.getSessionConfig().appendString(APPLICATION_CODE_ATTR, String.valueOf(ipToInt(ClientInfoService.getInfo().getIPAddress())));
    }

    public void onSessionDestroy(IDfSession session) throws DfException {

    }

    private int ipToInt(String ip) {
        String[] values = ip.split("\\.");
        return (Integer.valueOf(values[0]) << 24) +
                (Integer.valueOf(values[1]) << 16) +
                (Integer.valueOf(values[2]) << 8) +
                (Integer.valueOf(values[3]));
    }
}

Nikhil_Singhal

Hi,

We can't do any wdk customizations but instead we are doing it using tbo.

Below is the method which we are trying to override and obtain the desired info using dflogger

but in the logger files we are unable to see that desired result.

boolean doFetch (String currencyCheckValue, boolean usePersistentCache, boolean useSharedCache,Object[] extendedArgs) throws DfException

source:DFC development guide page 113

Thanks & Regards,

Nikhil

DCTM_Guru

doFetch retrieves content and metadata from the Content Server (after the file has been imported into the repository). This value will always be the same and I dont see how it addresses your requirement of getting IP address of the user for either upload or download to local coputer.

Nikhil_Singhal

If thats the case then kindly suggest what should we do to achieve the same.

Thanks

Nikhil

DCTM_Guru

There is no out of the box way to do this. Someone has already suggested a solution.

sivarry

Hi Nikhil,

Try creating a hidden field with the IP address in the login/content transfer jsp and post it to the server. Use this IP to create audit as required.

Here is a snippet to add ip address to a hidden field and accessing the same using javascript

<input type="hidden" id="ip_address" name="ip_address" value="<%=request.getRemoteAddr()%>"/>

<script type="text/javascript">

function getIP(){

alert(document.getElementById('ip_address').value);

}

</script>

Regards,

Siva

robert_5156

Hi Nikhil,

We have the same exact requirement to have the ability to clearly track who downloaded file from documentum from which ip address. Currently we can see file objectID , file name and username in ACS log. The missing peice is the client's ip address from which user logged into documentum and downloaded a file.

Can you please share your experience on how you addressed this logging issue.

Haroon_A

With WDK apps, i.e. DA, you could use X-Forwarded-For, in app.xml to get client's IP address.

k.anubhuti

Hi @PanfilovAB

I tried your solution and it works in my local tomcat instance. However, when i deploy the code on the server, audittrail entry still shows app server IP address as client machine's.

Am i missing anything?

Thanks
Anubhuti