[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6815) Feature Request: Accesslog filter



--0016363b85287ec3a0049cef245f
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Howard,
thanks for this work.

I noticed that you give me a baseDN under which I can have operations
logged.
If I would like to exclude one subtree from my principal tree, I need to
specify all the baseDN of other sibling-subtrees.
To do this do I need to poli-invoke accesslog overlay?

Thanks again
Marco

On Wed, Feb 23, 2011 at 3:15 AM, Howard Chu <hyc@symas.com> wrote:

> marco.pizzoli@gmail.com wrote:
>
>> Full_Name: Marco Pizzoli
>> Version: ALL
>> OS:
>> URL: ftp://ftp.openldap.org/incoming/
>> Submission from: (NULL) (193.41.84.11)
>>
>>
>> Hi,
>> this is a feature request.
>>
>> I would like to have accesslog writing to his db only ldap operations th=
at
>> match
>> some sort of filter, or, in particular, to not to log searches that
>> matches a
>> specific pattern.
>>
>> This request is spotted by some ldap clients that I have that every
>> 30seconds do
>> a dummy ldap search only to keep alive their connection to the ldap
>> server.
>> These searches are frequent and I have many of these clients in my deplo=
y,
>> so my
>> accesslog become full of not significant entries.
>>
>
> I've added a simple subtree-matching feature to accesslog in HEAD. Please
> test and let us know if it addresses this request.
>
> --
>  -- Howard Chu
>  CTO, Symas Corp.           http://www.symas.com
>  Director, Highland Sun     http://highlandsun.com/hyc/
>  Chief Architect, OpenLDAP  http://www.openldap.org/project/
>



--=20
_________________________________________
Non =E8 forte chi non cade, ma chi cadendo ha la forza di rialzarsi.
                    Jim Morrison

--0016363b85287ec3a0049cef245f
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Hi Howard,<br>thanks for this work.<br><br>I noticed that you give me a bas=
eDN under which I can have operations logged.<br>If I would like to exclude=
 one subtree from my principal tree, I need to specify all the baseDN of ot=
her sibling-subtrees.<br>

To do this do I need to poli-invoke accesslog overlay?<br><br>Thanks again<=
br>Marco<br><br><div class=3D"gmail_quote">On Wed, Feb 23, 2011 at 3:15 AM,=
 Howard Chu <span dir=3D"ltr">&lt;<a href=3D"mailto:hyc@symas.com";>hyc@syma=
s.com</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><a href=3D"mailto=
:marco.pizzoli@gmail.com" target=3D"_blank">marco.pizzoli@gmail.com</a> wro=
te:<br>


<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0.8ex; borde=
r-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Full_Name: Marco Pizzoli<br>
Version: ALL<br>
OS:<br>
URL: <a href=3D"ftp://ftp.openldap.org/incoming/"; target=3D"_blank">ftp://f=
tp.openldap.org/incoming/</a><br>
Submission from: (NULL) (193.41.84.11)<br>
<br>
<br>
Hi,<br>
this is a feature request.<br>
<br>
I would like to have accesslog writing to his db only ldap operations that =
match<br>
some sort of filter, or, in particular, to not to log searches that matches=
 a<br>
specific pattern.<br>
<br>
This request is spotted by some ldap clients that I have that every 30secon=
ds do<br>
a dummy ldap search only to keep alive their connection to the ldap server.=
<br>
These searches are frequent and I have many of these clients in my deploy, =
so my<br>
accesslog become full of not significant entries.<br>
</blockquote>
<br>
I&#39;ve added a simple subtree-matching feature to accesslog in HEAD. Plea=
se test and let us know if it addresses this request.<br><font color=3D"#88=
8888">
<br>
-- <br>
 =A0-- Howard Chu<br>
 =A0CTO, Symas Corp. =A0 =A0 =A0 =A0 =A0 <a href=3D"http://www.symas.com"; t=
arget=3D"_blank">http://www.symas.com</a><br>
 =A0Director, Highland Sun =A0 =A0 <a href=3D"http://highlandsun.com/hyc/"; =
target=3D"_blank">http://highlandsun.com/hyc/</a><br>
 =A0Chief Architect, OpenLDAP =A0<a href=3D"http://www.openldap.org/project=
/" target=3D"_blank">http://www.openldap.org/project/</a><br>
</font></blockquote></div><br><br clear=3D"all"><br>-- <br>________________=
_________________________<br>Non =E8 forte chi non cade, ma chi cadendo ha =
la forza di rialzarsi.<br>=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 Jim Morri=
son<br>

--0016363b85287ec3a0049cef245f--