Antwort: Re: No entries in Accesslog

[Michael.Heep@o2.com]

Okay,
I feel a little stupid. I knew it was something trivial I was missing.

It works as expected but I do get the same slapd crashes as posted in 
http://www.openldap.org/lists/openldap-software/200509/msg00392.html when 
issueing "massive" searches against the accesslog suffix with other tools 
than the openLDAP client tools. Will try HEAD and see if it's fixed in 
there.

Regards,
Michael Heep




Howard Chu <hyc@symas.com> 
23.09.2005 17:07

An
Michael.Heep@o2.com
Kopie
OpenLDAP-software@OpenLDAP.org
Thema
Re: No entries in Accesslog






Michael.Heep@o2.com wrote:
> Hi,
>
> I'm trying to get the slapo-accesslog overlay to work, but it doesn't 
seem 
> to fill up with any entries.
>
> I'm using OL2.3.7 + BDB4.2.52 + 4 official + OL transactions Patch.
> The relevant part of my slapd.conf looks like this:
>
> # accesslog db
> database bdb
> suffix cn=accesslog
> rootdn "cn=root,cn=accesslog"
> rootpw <cleartext pass>
> directory /var/lib/ldap/openldap-accesslog
>
> index reqStart eq
>
> # db with actual data
> database bdb
> suffix "dc=o2online,dc=de"
> rootdn "cn=root,dc=o2online,dc=de"
> rootpw <hashed ;)>
> directory /var/lib/ldap/openldap-data
>
> overlay accesslog
> logdb cn=accesslog
> logops all
> logpurge 30+00:00 01+:00:00
>
> index objectclass eq
> ... other indices, uniqueness overlay, etc ...
>
>
> When I issue an ldapsearch -b "dc=o2online,dc=de" -D 
> "uid=<myuid>,ou=People,dc=o2online,dc=de" -h ldap://<ldaphost> -W -x -ZZ 

> objectclass=* I get all the results I'm supposed to get from the 
directory 
> server.
>
> Issueing an ldapsearch -b "cn=accesslog" -D "cn=root,cn=accesslog" -W -x 

> -ZZ -H ldap://<ldaphost> objectlass=* returns a result: 32 No such 
object
>
> Probably I'm missing something or it's simply not in the documentation.
> The slapd log with loglevel -1 contains the following after starting up 
> and issueing the ldapsearch on cn=accesslog:
>
> Sep 23 14:22:45 sgmldap02 slapd[23385]: => bdb_search 
> Sep 23 14:22:45 sgmldap02 slapd[23385]: bdb_dn2entry("cn=accesslog") 
> Sep 23 14:22:45 sgmldap02 slapd[23385]: => bdb_dn2id("cn=accesslog") 
> Sep 23 14:22:45 sgmldap02 slapd[23385]: <= bdb_dn2id: get failed: 
> DB_NOTFOUND: No matching key/data pair found (-30990) 
> Sep 23 14:22:45 sgmldap02 slapd[23385]: send_ldap_result: conn=-1 op=0 
p=0 
> 
You must initialize the database, the accesslog overlay doesn't do it 
for you. That is, you must create the suffix entry (cn=accesslog) for 
the database, just as you would for any other database.

-- 
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  OpenLDAP Core Team            http://www.openldap.org/project/