This is now fixed in HEAD.

ckacoroski@nsd.org wrote:

Full_Name: Ski Kacoroski Version: 2.3.24 OS: Debian Linux Sarge 3.1 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (152.157.64.243)

I have the following setup:

dc=nsd, dc=org # superior database with accesslog nsdlog | -- ou=people # ou in superior database | -- ou=hosts # subordinate database with accesslog hostslog

When I make a change, search, add, delete to an object in "ou=people,dc=nsd,dc=org", I get logs in nsdlog only. This is makes sense

When I do a search with base "dc=nsd,dc=org" and scope of base I get an entry in nsdlog only. This makes sense. If I change the scope to one or sub I get an entry in nsdlog and hostslog. This also makes sense to me.

When I do the following search: ldapsearch -x -b "ou=hosts,dc=nsd,dc=org" -h localhost "(uid=test)" with any -s option I get entries in both nsdlog and hostslog even though the search should just be in the "ou=hosts,dc=nsd,dc=org" database.

Question is why I am still getting search entries in the nsdlog? Is this expected behaviour?

Also, if I make a add to an object in "ou=hosts,,dc=nsd,dc=org" I get 3 duplicate entries in both logs where I only expected to get entries in the hostslog. If I change the rootdn of "ou=hosts,dc=nsd,dc=org" to be "cn=root,ou=hosts,dc=nsd,dc=org" instead of "cn=root,dc=nsd,dc=org", I only get 1 duplicate entry in the nsdlog (e.g. I only get the add entry, not the bind or unbind entries as I am not binding to the rootdn in "dc=nsd,dc=org".

Question is why I am still getting the add entry in nsdlog? Is this expected behaviour?