LDAP logging

List overview All Threads
Download

newer

older

Bind accepts any password where...

Ppolicy, password lockout status

Ivan Ordonez

25 Jan 2010 25 Jan '10

4:38 p.m.

Hi,

I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng on Gentoo box.

Hope someone here can point me in the right direction. I'm lost here.

Here is my syslog-ng conf file:

@version: 3.0 # $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.3.0,v 1.1 2009/05/25 20:07:21 mr_bones_ Exp $ # # Syslog-ng default configuration file for Gentoo Linux

options { chain_hostnames(no);

# The default action of syslog-ng is to log a STATS line # to the file every 10 minutes. That's pretty ugly after a while. # Change it to every 12 hours so you get a nice daily update of # how many messages syslog-ng missed (0). stats_freq(43200); };

source src { unix-stream("/dev/log" max-connections(256)); internal(); file("/proc/kmsg"); };

#options { sync(n); };

destination messages { file("/var/log/messages"); }; destination authlog { file("/var/log/auth.log"); }; #destination syslog { file("/var/log/syslog"); }; destination ldap { file("/var/log/ldap.log"); }; destination cron { file("/var/log/cron.log"); };

# Create Filters filter f_messages { level(info..warn) and not facility(auth, authpriv, mail, news); }; filter f_authpriv { facility(auth, authpriv); }; #filter f_syslog { not facility(auth, authpriv) and not match(slapd); }; filter f_ldap { match("regexp" value ("slapd")); }; filter f_cron { facility(cron); };

# By default messages are logged to tty12... destination console_all { file("/dev/tty12"); }; # ...if you intend to use /dev/console for programs like xconsole # you can comment out the destination line above that references /dev/tty12 # and uncomment the line below. #destination console_all { file("/dev/console"); };

# Connect Filters and Destinations #log { source(src); destination(messages); }; log { source(src); filter(f_messages); destination(messages); }; log { source(src); filter(f_authpriv); destination(authlog); }; #log { source(src); filter(f_syslog); destination(syslog); }; log { source(src); filter(f_ldap); destination(ldap); }; log { source(src); filter(f_cron); destination(cron); };

# Default Log log { source(src); destination(console_all); };

Thanks in advance.

-Ivan

Show replies by date

Jorge Armando Medina

25 Jan 25 Jan

7:51 p.m.

Ivan Ordonez wrote:

...

Hi,

I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng on Gentoo box.

Hope someone here can point me in the right direction. I'm lost here.

Check my howto: http://tuxjm.net/docs/Configurar_Servidor_Controlador_de_Dominio_con_Samba_y... It is for ubuntu, also used for gentoo, just change the source.

...

Here is my syslog-ng conf file:

@version: 3.0 # $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.3.0,v 1.1 2009/05/25 20:07:21 mr_bones_ Exp $ # # Syslog-ng default configuration file for Gentoo Linux

options { chain_hostnames(no);

# The default action of syslog-ng is to log a STATS line # to the file every 10 minutes. That's pretty ugly after a while. # Change it to every 12 hours so you get a nice daily update of # how many messages syslog-ng missed (0). stats_freq(43200); };

source src { unix-stream("/dev/log" max-connections(256)); internal(); file("/proc/kmsg"); };

#options { sync(n); };

destination messages { file("/var/log/messages"); }; destination authlog { file("/var/log/auth.log"); }; #destination syslog { file("/var/log/syslog"); }; destination ldap { file("/var/log/ldap.log"); }; destination cron { file("/var/log/cron.log"); };

# Create Filters filter f_messages { level(info..warn) and not facility(auth, authpriv, mail, news); }; filter f_authpriv { facility(auth, authpriv); }; #filter f_syslog { not facility(auth, authpriv) and not match(slapd); }; filter f_ldap { match("regexp" value ("slapd")); }; filter f_cron { facility(cron); };

# By default messages are logged to tty12... destination console_all { file("/dev/tty12"); }; # ...if you intend to use /dev/console for programs like xconsole # you can comment out the destination line above that references /dev/tty12 # and uncomment the line below. #destination console_all { file("/dev/console"); };

# Connect Filters and Destinations #log { source(src); destination(messages); }; log { source(src); filter(f_messages); destination(messages); }; log { source(src); filter(f_authpriv); destination(authlog); }; #log { source(src); filter(f_syslog); destination(syslog); }; log { source(src); filter(f_ldap); destination(ldap); }; log { source(src); filter(f_cron); destination(cron); };

# Default Log log { source(src); destination(console_all); };

Thanks in advance.

-Ivan

Dieter Kluenter

10:55 p.m.

Ivan Ordonez iordonez@berkeley.edu writes:

...

Hi,

I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng on Gentoo box.

Hope someone here can point me in the right direction. I'm lost here.

slapd logs to local4.

filter f_local4 {facility(local4); }; destination slapd { file("/var/log/slapd"); }; log {source(src); filter(f_local4); destination(slapd); };

-Dieter

-- Dieter Klünter | Systemberatung http://dkluenter.de GPG Key ID:8EF7B6C6 53°37'09,95"N 10°08'02,42"E

Ivan Ordonez

26 Jan 26 Jan

9:17 a.m.

Dieter Kluenter wrote:

...

Ivan Ordonez iordonez@berkeley.edu writes:

...
Hi,

I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng on Gentoo box.

Hope someone here can point me in the right direction. I'm lost here.

slapd logs to local4.

filter f_local4 {facility(local4); }; destination slapd { file("/var/log/slapd"); }; log {source(src); filter(f_local4); destination(slapd); };

-Dieter

I still can't get the logging to work. I followed both suggestions (Dieter and Jorge) to no avail. The syslog-ng daemon starts fine but when I check the ldap log, it's empty. The cron and auth logging is working perfectly fine. Please advise.

Thanks in advance.

Edward Capriolo

10:10 a.m.

On Tue, Jan 26, 2010 at 12:17 PM, Ivan Ordonez iordonez@berkeley.edu wrote:

...

Dieter Kluenter wrote:

Ivan Ordonez iordonez@berkeley.edu writes:

Hi, I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng on Gentoo box. Hope someone here can point me in the right direction. I'm lost here.

slapd logs to local4. filter f_local4 {facility(local4); }; destination slapd { file("/var/log/slapd"); }; log {source(src); filter(f_local4); destination(slapd); }; -Dieter

I still can't get the logging to work. I followed both suggestions (Dieter and Jorge) to no avail. The syslog-ng daemon starts fine but when I check the ldap log, it's empty. The cron and auth logging is working perfectly fine. Please advise.

Thanks in advance.

Check how the package was built.

If the configuration argument "--enable-debug=yes" was not given, you get no logging.

Ivan Ordonez

10:22 a.m.

Edward Capriolo wrote:

...

On Tue, Jan 26, 2010 at 12:17 PM, Ivan Ordonez iordonez@berkeley.edu wrote:

...
Dieter Kluenter wrote:

Ivan Ordonez iordonez@berkeley.edu writes:

Hi, I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng on Gentoo box. Hope someone here can point me in the right direction. I'm lost here.

slapd logs to local4. filter f_local4 {facility(local4); }; destination slapd { file("/var/log/slapd"); }; log {source(src); filter(f_local4); destination(slapd); }; -Dieter

I still can't get the logging to work. I followed both suggestions (Dieter and Jorge) to no avail. The syslog-ng daemon starts fine but when I check the ldap log, it's empty. The cron and auth logging is working perfectly fine. Please advise.

Thanks in advance.

Check how the package was built.

If the configuration argument "--enable-debug=yes" was not given, you get no logging.

It was logging before without issue. I can see the log in /var/log/messages file. The problem started hen I emerge or install the new version of openldap (version 2.4.19-r1). Since then the LDAP logging disappeared in /var/log/messages file. All I want to do is to see where the logs go or have the ability to access it.

Thanks, -Ivan

Dieter Kluenter

12:52 p.m.

Ivan Ordonez iordonez@berkeley.edu writes:

...

Edward Capriolo wrote:

On Tue, Jan 26, 2010 at 12:17 PM, Ivan Ordonez <iordonez@berkeley.edu> wrote:

    Dieter Kluenter wrote:

    Ivan Ordonez <iordonez@berkeley.edu> writes:

    Hi,
    I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng
    on Gentoo box.
    Hope someone here can point me in the right direction.  I'm lost
    here.

    slapd logs to local4.
    filter f_local4         {facility(local4); };
    destination slapd { file("/var/log/slapd"); };
    log {source(src); filter(f_local4); destination(slapd); };
    -Dieter

    I still can't get the logging to work.  I followed both suggestions (Dieter
    and Jorge) to no avail.  The syslog-ng daemon starts fine but when I check
    the ldap log, it's empty.  The cron and auth logging is working perfectly
    fine.  Please advise.

    Thanks in advance.

Check how the package was built.

If the configuration argument
"--enable-debug=yes"
was not given, you get no logging.

As I mentioned in my previous post, slapd logs to local4, check your syslog-ng.conf wether there are other filters with a facility local4.

-Dieter

-- Dieter Klünter | Systemberatung http://dkluenter.de GPG Key ID:8EF7B6C6 53°37'09,95"N 10°08'02,42"E

Ivan Ordonez

1:18 p.m.

Dieter Kluenter wrote:

...

Ivan Ordonez iordonez@berkeley.edu writes:

...
Edward Capriolo wrote:
On Tue, Jan 26, 2010 at 12:17 PM, Ivan Ordonez <iordonez@berkeley.edu> wrote:

    Dieter Kluenter wrote:

    Ivan Ordonez <iordonez@berkeley.edu> writes:

    Hi,
    I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng
    on Gentoo box.
    Hope someone here can point me in the right direction.  I'm lost
    here.

    slapd logs to local4.
    filter f_local4         {facility(local4); };
    destination slapd { file("/var/log/slapd"); };
    log {source(src); filter(f_local4); destination(slapd); };
    -Dieter

    I still can't get the logging to work.  I followed both suggestions (Dieter
    and Jorge) to no avail.  The syslog-ng daemon starts fine but when I check
    the ldap log, it's empty.  The cron and auth logging is working perfectly
    fine.  Please advise.

    Thanks in advance.

Check how the package was built.

If the configuration argument
"--enable-debug=yes"
was not given, you get no logging.
It was logging before without issue. I can see the log in /var/log/messages file. The problem started hen I emerge or install the new version of openldap (version 2.4.19-r1). Since then the LDAP logging disappeared in /var/log/messages file. All I want to do is to see where the logs go or have the ability to access it.
As I mentioned in my previous post, slapd logs to local4, check your syslog-ng.conf wether there are other filters with a facility local4.

-Dieter

I added local4 on my syslog-ng.conf file as you suggest on your previous email. Do I need to make any changes on slapd.conf?

Olivier Rademakers

1:21 p.m.

Dieter Kluenter wrote:

...

Ivan Ordonez iordonez@berkeley.edu writes:

...
Edward Capriolo wrote:
On Tue, Jan 26, 2010 at 12:17 PM, Ivan Ordonez <iordonez@berkeley.edu> wrote:

    Dieter Kluenter wrote:

    Ivan Ordonez <iordonez@berkeley.edu> writes:

    Hi,
    I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng
    on Gentoo box.
    Hope someone here can point me in the right direction.  I'm lost
    here.

    slapd logs to local4.
    filter f_local4         {facility(local4); };
    destination slapd { file("/var/log/slapd"); };
    log {source(src); filter(f_local4); destination(slapd); };
    -Dieter

    I still can't get the logging to work.  I followed both suggestions (Dieter
    and Jorge) to no avail.  The syslog-ng daemon starts fine but when I check
    the ldap log, it's empty.  The cron and auth logging is working perfectly
    fine.  Please advise.

    Thanks in advance.

Check how the package was built.

If the configuration argument
"--enable-debug=yes"
was not given, you get no logging.
It was logging before without issue. I can see the log in /var/log/messages file. The problem started hen I emerge or install the new version of openldap (version 2.4.19-r1). Since then the LDAP logging disappeared in /var/log/messages file. All I want to do is to see where the logs go or have the ability to access it.
As I mentioned in my previous post, slapd logs to local4, check your syslog-ng.conf wether there are other filters with a facility local4.

-Dieter

And if you're using gentoo, compile openldap with the "syslog" use flag :-)

Cheers, Olivier

Ivan Ordonez

1:37 p.m.

Olivier Rademakers wrote:

...

Dieter Kluenter wrote:

...
Ivan Ordonez iordonez@berkeley.edu writes:

...
Edward Capriolo wrote:
On Tue, Jan 26, 2010 at 12:17 PM, Ivan Ordonez <iordonez@berkeley.edu> wrote:

    Dieter Kluenter wrote:

    Ivan Ordonez <iordonez@berkeley.edu> writes:

    Hi,
    I want to create logging for LDAP (version 2.4.19-r1) using syslog-ng
    on Gentoo box.
    Hope someone here can point me in the right direction.  I'm lost
    here.

    slapd logs to local4.
    filter f_local4         {facility(local4); };
    destination slapd { file("/var/log/slapd"); };
    log {source(src); filter(f_local4); destination(slapd); };
    -Dieter

    I still can't get the logging to work.  I followed both suggestions (Dieter
    and Jorge) to no avail.  The syslog-ng daemon starts fine but when I check
    the ldap log, it's empty.  The cron and auth logging is working perfectly
    fine.  Please advise.

    Thanks in advance.

Check how the package was built.

If the configuration argument
"--enable-debug=yes"
was not given, you get no logging.
It was logging before without issue. I can see the log in /var/log/messages file. The problem started hen I emerge or install the new version of openldap (version 2.4.19-r1). Since then the LDAP logging disappeared in /var/log/messages file. All I want to do is to see where the logs go or have the ability to access it.
As I mentioned in my previous post, slapd logs to local4, check your syslog-ng.conf wether there are other filters with a facility local4.

-Dieter
And if you're using gentoo, compile openldap with the "syslog" use flag :-)

Cheers, Olivier

Compiling openldap using "syslog" flag did the trick. Whew! Many thanks for all your help!!

-Ivan

5444

Age (days ago)

5444

Last active (days ago)

openldap-technical@openldap.org

9 comments

5 participants

tags (0)

participants (5)

Dieter Kluenter
Edward Capriolo
Ivan Ordonez
Jorge Armando Medina
Olivier Rademakers