Ciao, Michael,
Yes, it is a slapcat output and it is filtered: BASEDN is just a replacement. I had to remove slapo-accesslog because I was unable to login to the server anymore. So properly delete these entries was not an option for me. This is the origin of the problem.
Thanks, Giuseppe
2018-05-17 10:57 GMT+02:00 Michael Ströder michael@stroeder.com:
Giuseppe Civitella wrote:
while doing some tests to enable accesslog in my directory, I did enable
the
overlay and then disabled it because of login problems.
I doubt that you had login problems caused by slapo-accesslog.
Once restored the directory, I found a few entries like this:
dn: reqStart=20180509102412.000000Z,BASEDN objectClass: auditModify structuralObjectClass: auditModify REQSTART: 20180509102412.000000Z REQEND: 20180509102412.000001Z REQTYPE: modify
Is this slapcat output? Did you obfuscate your e-mail with "BASEDN"?
Note that removing slapo-accesslog also removed the object class and attribute type descriptions from your subschema. Typically slapcat outputs names of attribute types missing in subschema all with capital letters.
deleting entry "reqStart=20180509102412.000000Z,BASEDN" ldap_delete: Invalid DN syntax (34) additional info: invalid DN
OpenLDAP server checks schema even for DNs. Hence a DN containing 'reqStart' is an invalid DN if you don't have slapo-accesslog loaded.
Ciao, Michael.