Re: Two log lines for SRCH parameters?
On 2/11/20 1:48 PM, Howard Chu wrote:
Michael Ströder wrote:
> I'm wondering why there are two log lines for listing the search
> parameters for a single search operation:
>
> SRCH base="dc=ae-dir,dc=example,dc=org" scope=2 deref=0
> filter="(objectClass=aePerson)"
>
> SRCH attr=cn givenName sn mail aeStatus
>
> Is there any rationale for that?
Because any of DN, filter, or attrs could be too long for a single syslog message.
On many systems the limit was 1024 characters; using a single log message resulted
in too many truncated messages.
Oh, I see [1].
Even in 2009 only a SHOULD for 2048 octets was defined while the MUST
minimum was _lowered_ to 480 [2].
Ciao, Michael.
[1] https://tools.ietf.org/html/rfc3164#section-4.1
[2] https://tools.ietf.org/html/rfc5424#section-6.1