[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Logging question



Ski Kacoroski wrote:
Howard Chu wrote:
Ski Kacoroski wrote:
Hmmm, I am still missing something here. I changed the ordering with the overlay glue option and I still get almost duplicate (only the reqEnd time is slightly different) entries in both log databases when I search create or search for entries in ou=hosts,dc=nsd,dc=org. It does work the other way (e.g. if I search ou=people,dc=nsd,dc=org, I do not get an entry in the ou=hosts,dc=nsd,dc=org log database).

Interesting. Actually with the default ordering it works about as well as it's going to. Any subtree search from the top database will generate log records in both databases since the subtree search is propagated all the way down. But anything else that only affects a single entry will only generate logs in one place or the other.

I bound as "uid=test,ou=hosts,dc=nsd,dc=org" subordinate database. The log entries in the superior database when I changed "uid=test" entry are:


dn: reqStart=20060616233810.000000Z,cn=nsdlog
objectClass: auditSearch
reqStart: 20060616233810.000000Z
reqEnd: 20060616233810.000002Z
reqType: search
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: ou=hosts,dc=nsd,dc=org
reqResult: 0
reqScope: one
reqDerefAliases: finding
reqAttrsOnly: FALSE
reqFilter: (uid=test)
reqEntries: 1
reqTimeLimit: 3600
reqSizeLimit: 10000

dn: reqStart=20060616233819.000000Z,cn=nsdlog
objectClass: auditModify
reqStart: 20060616233819.000000Z
reqEnd: 20060616233819.000002Z
reqType: modify
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: uid=test,ou=hosts,dc=nsd,dc=org
reqResult: 0
reqMod: nsdContact:= test
reqMod: entryCSN:= 20060616233819Z#000000#00#000000
reqMod: modifiersName:= uid=test,ou=hosts,dc=nsd,dc=org
reqMod: modifyTimestamp:= 20060616233819Z


while in the subordinate access log they were:

dn: reqStart=20060616233810.000000Z,cn=nsdhostslog
objectClass: auditSearch
reqStart: 20060616233810.000000Z
reqEnd: 20060616233810.000001Z
reqType: search
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: ou=hosts,dc=nsd,dc=org
reqResult: 0
reqScope: one
reqDerefAliases: finding
reqAttrsOnly: FALSE
reqFilter: (uid=test)
reqEntries: 1
reqTimeLimit: 3600
reqSizeLimit: 10000

dn: reqStart=20060616233819.000000Z,cn=nsdhostslog
objectClass: auditModify
reqStart: 20060616233819.000000Z
reqEnd: 20060616233819.000001Z
reqType: modify
reqSession: 4
reqAuthzID: uid=test,ou=hosts,dc=nsd,dc=org
reqDN: uid=test,ou=hosts,dc=nsd,dc=org
reqResult: 0
reqMod: nsdContact:= test
reqMod: entryCSN:= 20060616233819Z#000000#00#000000
reqMod: modifiersName:= uid=test,ou=hosts,dc=nsd,dc=org
reqMod: modifyTimestamp:= 20060616233819Z


-- "When we try to pick out anything by itself, we find it connected to the entire universe" John Muir

Chris "Ski" Kacoroski, ski@nsd.org, 206-501-9803