Hi all,
Is anyone using "reqAttr" of accesslog overlay to find ldap requests for specific attributes?
Our accesslog db contains some entries like for example:
dn: reqStart=20140902092840.000001Z,cn=accesslog objectClass: auditSearch reqStart: 20140902092840.000001Z reqEnd: 20140902092840.000002Z reqType: search reqSession: 1018 reqAuthzID: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth reqDN: dc=example,dc=com reqResult: 0 reqScope: sub reqDerefAliases: never reqAttrsOnly: FALSE reqFilter: (objectClass=*) reqAttr: userPassword reqEntries: 7 reqTimeLimit: 3600 reqSizeLimit: 500
I am trying to search using the filter "(reqAttr=userPassword)" but no results are returned, while "(reqAttr=*)" returns all entries. What am I missing?
Using version 2.4.39
John