Viewing Software Enhancements/5793
Full headers

Major security issue: yes  no

Notes:

Notification:

Date: Wed, 5 Nov 2008 11:16:16 GMT
From: ghenry@OpenLDAP.org
To: openldap-its@openldap.org
Subject: RFE for flexible logging at 256/stats level

Full_Name: Gavin Henry
Version: N/A
OS: N/A
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (80.229.93.1)
Submitted by: ghenry


Hi all,

Just a quick note to say it would be nice to be able to break out loglevel 256
i.e. Log just writes. The same as accesslog config. 

Thanks,

Gavin.

Followup 1

Date: Wed, 19 Nov 2008 10:02:47 +0100
From: Pierangelo Masarati <ando@sys-net.it>
To: ghenry@OpenLDAP.org
CC: openldap-its@OpenLDAP.org
Subject: Re: (ITS#5793) RFE for flexible logging at 256/stats level

ghenry@OpenLDAP.org wrote:

> Just a quick note to say it would be nice to be able to break out loglevel
256
> i.e. Log just writes. The same as accesslog config. 

Are you thinking of something like a read/write/auth flag, plus possibly 
a success/failure flag, or a per-operation granularity?

Wouldn't it make sense to entirely give up syslog'ging and use 
slapo-accesslog instead?

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------

Followup 2

Date: Wed, 19 Nov 2008 14:15:37 +0000 (GMT)
From: Gavin Henry <ghenry@OpenLDAP.org>
To: Pierangelo Masarati <ando@sys-net.it>
Cc: openldap-its@OpenLDAP.org, ghenry@OpenLDAP.org
Subject: Re: (ITS#5793) RFE for flexible logging at 256/stats level

----- "Pierangelo Masarati" <ando@sys-net.it> wrote:

> ghenry@OpenLDAP.org wrote:
> 
> > Just a quick note to say it would be nice to be able to break out
> loglevel 256
> > i.e. Log just writes. The same as accesslog config. 
> 
> Are you thinking of something like a read/write/auth flag, plus
> possibly 
> a success/failure flag, or a per-operation granularity?

Probably the later. It's more to not lot searches, but writes, as 256
can really fill up your logfile.
 
> Wouldn't it make sense to entirely give up syslog'ging and use 
> slapo-accesslog instead?

For some users, yes. But having the phyiscal log is appealing too.

Thanks.

-- 
Kind Regards,

Gavin Henry.
OpenLDAP Engineering Team.

E ghenry@OpenLDAP.org

Community developed LDAP software.

http://www.openldap.org/project/

Followup 3

Date: Thu, 20 Nov 2008 14:20:56 +0100
From: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
To: ando@sys-net.it
CC: openldap-its@openldap.org
Subject: Re: (ITS#5793) RFE for flexible logging at 256/stats level

ando@sys-net.it wrote:
> Wouldn't it make sense to entirely give up syslog'ging and use 
> slapo-accesslog instead?

Hmm, I think this change would be too radical. I still see some value in 
text messages going to syslog. Configuration issues are sometimes more 
obvious if you see the syslog messages of LDAP-enabled components and 
the LDAP server one after the other in the same log.

Ciao, Michael.

Followup 4

Date: Thu, 20 Nov 2008 14:54:45 +0100
From: Pierangelo Masarati <ando@sys-net.it>
To: michael@stroeder.com
CC: openldap-its@openldap.org
Subject: Re: (ITS#5793) RFE for flexible logging at 256/stats level

michael@stroeder.com wrote:
> ando@sys-net.it wrote:
>> Wouldn't it make sense to entirely give up syslog'ging and use 
>> slapo-accesslog instead?
> 
> Hmm, I think this change would be too radical. I still see some value in 
> text messages going to syslog. Configuration issues are sometimes more 
> obvious if you see the syslog messages of LDAP-enabled components and 
> the LDAP server one after the other in the same log.

I meant "give up" by not looking at logs for Gavin's purposes, not to 
eradicate them from the code.  Modifying "stats" logging would not 
probably be a big issue, if we define a specific mask: one bit for each 
operation, and one bit for success/failure.

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------