Bind DN not logged with GSSAPI binds (ITS#2283)

[quanah@stanford.edu]

Full_Name: Quanah Gibson-Mount
Version: 2.1.10
OS: Solaris 8
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (171.66.182.82)


Hello,

In the past (due to a previous request, as I recall), openldap would log the
BIND dn of a person making a GSSAPI connection at loglevel 256.  It correctly
logs the authcid and the authzid now, but the resulting BIND dn (in the case of
group memberships) is not being logged.  It is important to know to what BIND DN
these two bits of information were eventually resolved to.

--Quanah