marco.pizzoli@gmail.com wrote:

Full_Name: Marco Pizzoli Version: 2.4.x OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (213.174.164.11)

This is a feature request.

I would like to further extend accesslog filtering capabilities. It would be useful to me exclude logging of operations made by a specific user (DN).

My usage case is a DBMS (DB2) using native LDAP authentication, which does extensive search operations on my DIT (quite 2 millions searches per day per instance). I assigned a specific technical user (DN) to these DB2 instancies and so I am able to identify operations made by those users.

This filter would allow me to reduce very much my accesslog db size and augment my data retention.

Patches welcome.