It works! :-) In next 2 days I will test other configurations and I will let you know!

By now, thanks a lot! Marco

On Wed, Apr 20, 2011 at 9:26 PM, Howard Chu hyc@symas.com wrote:

Marco Pizzoli wrote:

...

Trying a more complex configuration I found my first problem. This is my configuration:

logbase session dc=mycorp,dc=mydc.it logbase all ou=groups,dc=mycorp,dc=mydc.it logbase all ou=people,dc=mycorp,dc=mydc.it

Using my rootdn (cn=manager,dc=mycorp,dc=mydc.it) and submitting an authenticated ldapsearch under base "ou=groups,dc=mycorp,dc=mydc.it", I obtain this accesslog

# 20110420141404.000000Z, log03, mydc.it dn: reqStart=20110420141404.000000Z,cn=log03,dc=mydc.it objectClass: auditBind reqStart: 20110420141404.000000Z reqEnd: 20110420141404.000001Z reqType: bind reqSession: 1000 reqAuthzID: reqDN: cn=manager,dc=mycorp,dc=mydc.it reqResult: 0 reqVersion: 3 reqMethod: SIMPLE

# 20110420141404.000002Z, log03, mydc.it dn: reqStart=20110420141404.000002Z,cn=log03,dc=mydc.it objectClass: auditSearch reqStart: 20110420141404.000002Z reqEnd: 20110420141404.000003Z reqType: search reqSession: 1000 reqAuthzID: cn=manager,dc=mycorp,dc=mydc.it reqDN: ou=groups,dc=mycorp,dc=mydc.it reqResult: 0 reqScope: sub reqDerefAliases: never reqAttrsOnly: FALSE reqFilter: (cn=minnie) reqAttr: dn reqEntries: 0 reqTimeLimit: -1 reqSizeLimit: -1

As you can see, there isn't the unbind operation log... It's an error of mine?

Looks like Unbind has not been modified to handle logbase yet. Will fix this shortly.

--  -- Howard Chu  CTO, Symas Corp.           http://www.symas.com  Director, Highland Sun     http://highlandsun.com/hyc/  Chief Architect, OpenLDAP  http://www.openldap.org/project/