Hello,
thank you that was exactly what I was looking for.
Does anyone know a software such as a web interface, which will be able to read the data from the accesslog base and display them in a more friendly way ?
Regards,
Hugo
On 6 October 2011 04:55, Quanah Gibson-Mount quanah@zimbra.com wrote:
--On Wednesday, October 05, 2011 11:41 AM +0200 Hugo Deprez hugo.deprez@gmail.com wrote:
Dear community,
I am currently using openldap 2.4.23-3 on Debian Lenny. I need to be able to log all the change made on the directory. For exemple if a account is delete I would like to log who did it and at what time. I want to do some accounting.
Do you know how I could do that ? I didn't found anything on google.
man slapo-accesslog
--Quanah
--
Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc.
Zimbra :: the leader in open source messaging and collaboration
Hi, some times ago I considered the possibility to export ldap-data as dsml (xml). OpenLDAP doesn't natively support (yet) dsml output, but you can find something on the web that could help you.
Mi idea was then to write a CSS or XSLT stylesheet to transform the dsml in a more ITmanagement-friendly output :-)
Hope this helps Marco
On Thu, Oct 6, 2011 at 12:10 PM, Hugo Deprez hugo.deprez@gmail.com wrote:
Hello,
thank you that was exactly what I was looking for.
Does anyone know a software such as a web interface, which will be able to read the data from the accesslog base and display them in a more friendly way ?
Regards,
Hugo
On 6 October 2011 04:55, Quanah Gibson-Mount quanah@zimbra.com wrote:
--On Wednesday, October 05, 2011 11:41 AM +0200 Hugo Deprez hugo.deprez@gmail.com wrote:
Dear community,
I am currently using openldap 2.4.23-3 on Debian Lenny. I need to be able to log all the change made on the directory. For exemple if a account is delete I would like to log who did it and at what time. I want to do some accounting.
Do you know how I could do that ? I didn't found anything on google.
man slapo-accesslog
--Quanah
--
Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc.
Zimbra :: the leader in open source messaging and collaboration
Hugo Deprez wrote:
Does anyone know a software such as a web interface, which will be able to read the data from the accesslog base and display them in a more friendly way ?
My web2ldap does that. There's a default config section for accesslog-DB. If the naming context of your accesslog DB is other than cn=accesslog you can simply tweak the DN in the config.
Features:
1. Custom search form (based on configurable HTML template).
2. Configurable HTML template snippets for search results.
3. Furthermore when displaying a single entry within a naming context which has the auditContext attribute set the context menu on the right shows two links for directly searching all (write) operations on that entry.
4. The [ConnInfo] part shows links to search your own operations in the accesslog DB (based on the current bind-DN).
Unfortunately I don't know a public OpenLDAP server with slapo-accesslog publicly enabled. But feel free to access your own server via the web2ldap demo:
Ciao, Michael.
Hello Michael,
That's what I am looking for. I am trying to install it on Debian lenny.
But It seems that I don't all the requirements on debian : python version is 2.5.2-15 pyasn and pyasn1_modules is version 0.0.8a-1 python-ldapon debian is version 2.3.5-1 pyweblib-1.3.8 doesn't exist on debian as a package,
I am not really familiar with python so it seems a bit hard to setup it for me (I mean compile the lib).
Do you know if anyone achieve to install it on Debian?
Regards,
Hugo
2011/10/6 Michael Ströder michael@stroeder.com:
Hugo Deprez wrote:
Does anyone know a software such as a web interface, which will be able to read the data from the accesslog base and display them in a more friendly way ?
My web2ldap does that. There's a default config section for accesslog-DB. If the naming context of your accesslog DB is other than cn=accesslog you can simply tweak the DN in the config.
Features:
Custom search form (based on configurable HTML template).
Configurable HTML template snippets for search results.
Furthermore when displaying a single entry within a naming context which
has the auditContext attribute set the context menu on the right shows two links for directly searching all (write) operations on that entry.
- The [ConnInfo] part shows links to search your own operations in the
accesslog DB (based on the current bind-DN).
Unfortunately I don't know a public OpenLDAP server with slapo-accesslog publicly enabled. But feel free to access your own server via the web2ldap demo:
Ciao, Michael.
Hugo Deprez wrote:
That's what I am looking for. I am trying to install it on Debian lenny.
But It seems that I don't all the requirements on debian : python version is 2.5.2-15 pyasn and pyasn1_modules is version 0.0.8a-1 python-ldapon debian is version 2.3.5-1 pyweblib-1.3.8 doesn't exist on debian as a package,
It seems to me Python support is way behind on Debian. Bad luck...
But unfortunately no Linux distribution ships with python-ldap 2.4.x at the moment. If one wants to stick to pre-compiled packages easiest option is Windows. ;-)
This is rather off-topic here. In this particular case you can e-mail me personally to get further hints about how to install web2ldap.
Ciao, Michael.
openldap-technical@openldap.org
-
Hugo Deprez -
Marco Pizzoli -
Michael Ströder