OpenLDAP - Debug logging

While it may be possible to make OpenLDAP log to syslog, I am unable to do it so far with OLC

See https://www.openldap.org/doc/admin24/slapdconf2.html

So, the next alternative is log to stdout. To do so, you could run

slapd -d 256 -d 128

which defines logging as Stats and ACL respectively

You will see log output at the console


63b51bda conn=1014 op=0 BIND dn="cn=user,dc=abc,dc=com" method=128

63b51bda conn=1014 op=0 BIND dn="cn=user,dc=abc,dc=com" mech=SIMPLE ssf=0

63b51bda conn=1014 op=0 RESULT tag=97 err=0 text=

63b51bda conn=1014 op=1 SRCH base="uid=ldapuser2,ou=people,dc=abc,dc=com" scope=2 deref=3 filter="(&(objectClass=*)(uid=ldapuser2))"

63b51bda => access_allowed: search access to "uid=ldapuser2,ou=people,dc=abc,dc=com" "entry" requested


 You could refers to https://www.openldap.org/doc/admin24/slapdconf2.html for debug level information.

Comments

Popular Posts