Michael Ströder wrote:
I'm wondering why there are two log lines for listing the search
parameters for a single search operation:
SRCH base="dc=ae-dir,dc=example,dc=org" scope=2 deref=0
SRCH attr=cn givenName sn mail aeStatus
Is there any rationale for that?
Because any of DN, filter, or attrs could be too long for a single syslog message.
On many systems the limit was 1024 characters; using a single log message resulted
in too many truncated messages.
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/