Issue 7929 - memberof overlay supresses accesslog olcAccessLogOps = all
Summary: memberof overlay supresses accesslog olcAccessLogOps = all
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-09-04 09:11 UTC by Peter Varkoly
Modified: 2014-10-23 07:34 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description Peter Varkoly 2014-09-04 09:11:50 UTC
Full_Name: Peter Varkoly
Version: 2.4.26, 2.4.39
OS: SUSE Enterprise Server
URL: ftp://ftp.suse.com/pub/people/varkoly
Submission from: (NULL) (2620:113:80c0:5::2222)


Enabling both the "memberof" and "accesslog" overlays in openldap causes
accesslog to only log "reads" and "session" operations when logops is set to
all (olcAccessLogOps = all).

Disabling the "memberof" overlay results in "writes", "reads" and "session"
operations to be logged.

Setting "olcAccessLogOps = writes" in conjunction with the "memberof" overlay
results in "writes" operations to be logged.

Expected result is that when "olcAccessLogOps = all" is set for the "accesslog"
overlay together with the "memberof" overlay, that all operations (add, modify,
delete, modrdn, search, bind, unbind, abandon, compare) are logged to
cn=accesslog.

The order of activating the overlays is irrelevant. We have tested it by
activating first memberof and accesslog too.

We are using the config-backend.

The configuration will be available soon under the provided URL.
Comment 1 Quanah Gibson-Mount 2014-09-04 15:54:51 UTC
--On Thursday, September 04, 2014 10:11 AM +0000 varkoly@suse.com wrote:

> Full_Name: Peter Varkoly
> Version: 2.4.26, 2.4.39

Hello,

Can you please test using the current RE24 code?  There have been 
significant updates made to the overlay interactions since 2.4.39.

Thanks!

--Quanah


--

Quanah Gibson-Mount
Server Architect
Zimbra, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration

Comment 2 Peter Varkoly 2014-09-06 16:15:30 UTC
Hello,

I've tested it from
git://git.openldap.org/openldap.git/OPENLDAP_REL_ENG_2_4
with same result.

http://www.openldap.org/its/index.cgi/Incoming?id=7239 looks vaguely
similar, although with a different overlay.

Am Donnerstag, den 04.09.2014, 15:55 +0000 schrieb quanah@zimbra.com:
> --On Thursday, September 04, 2014 10:11 AM +0000 varkoly@suse.com wrote:
> 
> > Full_Name: Peter Varkoly
> > Version: 2.4.26, 2.4.39
> 
> Hello,
> 
> Can you please test using the current RE24 code?  There have been 
> significant updates made to the overlay interactions since 2.4.39.
> 
> Thanks!
> 
> --Quanah
> 
> 
> --
> 
> Quanah Gibson-Mount
> Server Architect
> Zimbra, Inc.
> --------------------
> Zimbra ::  the leader in open source messaging and collaboration
> 
> 
> 
> 

-- 
Peter Varkoly
Sr. Developer SUSE Linux Enterprise Applications
SUSE LINUX Products GmbH,
GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG
Nürnberg)
Maxfeldstraße 5
90409 Nürnberg
Germany


Comment 3 Howard Chu 2014-09-08 14:07:21 UTC
varkoly@suse.com wrote:
> Full_Name: Peter Varkoly
> Version: 2.4.26, 2.4.39
> OS: SUSE Enterprise Server
> URL: ftp://ftp.suse.com/pub/people/varkoly
> Submission from: (NULL) (2620:113:80c0:5::2222)
>

> We are using the config-backend.
>
> The configuration will be available soon under the provided URL.

The config DB is a slapd backend like any other. The proper way to export any 
slapd backend is using slapcat, as plainly documented already. A tar (or any 
other type of) archive of the raw slapd backend files is nonportable.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 4 Howard Chu 2014-09-08 14:42:43 UTC
varkoly@suse.com wrote:
> Full_Name: Peter Varkoly
> Version: 2.4.26, 2.4.39
> OS: SUSE Enterprise Server
> URL: ftp://ftp.suse.com/pub/people/varkoly
> Submission from: (NULL) (2620:113:80c0:5::2222)
>
>
> Enabling both the "memberof" and "accesslog" overlays in openldap causes
> accesslog to only log "reads" and "session" operations when logops is set to
> all (olcAccessLogOps = all).
>
> Disabling the "memberof" overlay results in "writes", "reads" and "session"
> operations to be logged.
>
> Setting "olcAccessLogOps = writes" in conjunction with the "memberof" overlay
> results in "writes" operations to be logged.

Fixed now in git master.
>
> Expected result is that when "olcAccessLogOps = all" is set for the "accesslog"
> overlay together with the "memberof" overlay, that all operations (add, modify,
> delete, modrdn, search, bind, unbind, abandon, compare) are logged to
> cn=accesslog.
>
> The order of activating the overlays is irrelevant. We have tested it by
> activating first memberof and accesslog too.
>
> We are using the config-backend.
>
> The configuration will be available soon under the provided URL.
>
>
>


-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 5 Howard Chu 2014-09-08 14:43:27 UTC
changed notes
changed state Open to Test
moved from Incoming to Software Bugs
Comment 6 Quanah Gibson-Mount 2014-09-08 16:45:44 UTC
changed notes
changed state Test to Release
Comment 7 OpenLDAP project 2014-10-23 07:34:16 UTC
fixed in master
fixed in RE25
fixed in RE24
Comment 8 Quanah Gibson-Mount 2014-10-23 07:34:16 UTC
changed notes
changed state Release to Closed