Skip to content

Feat: Additional debug logging #73

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tmolbergen opened this issue May 14, 2025 · 1 comment
Open

Feat: Additional debug logging #73

tmolbergen opened this issue May 14, 2025 · 1 comment

Comments

@tmolbergen
Copy link

When debugging policies it would be great to see what the policy module has managed to decode the CSR into, without having read all the c# code, im assuming that the csr in its entirety is serialized in some way shape or form, being able to view the whole serialized csr with its properties would make it alot easier to create policies which mapped the intended target audience.

I am yet to see any other event ids other than event id 5. I have enabled CA loglevel 5, but I still dont get any exceptions or errors logged. I would expect (see #71) to be flagged as an error. Other directory errors I have encountered which i more or less expect an error event on;
Directory query (&([email protected])(objectCategory=user)) in LDAP://mydomain.com/OU=People failed because 0x80072020 (-2147016672): An operations error occurred.

@Sleepw4lker
Copy link
Owner

Sleepw4lker commented May 16, 2025

This is due to the design of TameMyCerts, we started with .NET 4 and tried to avoid calls to the Event Log from within the inner logic (to ease Unit testing these). Thus you will see all "errors" either in Event 5 (when in Audit mode) or 6 (when not in Audit mode).

@virot has added ETW logging to the project but it is not completely covered yet.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants