2:08 a.m.
I need to have in a exploitable format the failed binds. Something similar
to the correct binds in the accesslog. I have seen that some people talks
about the use of loglevel 256, but i thing that is too hard. Any help would
be welcome.
Thanks!
2:31 a.m.
2014/1/15 David Tello <david.tello.wbsgo(a)gmail.com>
I need to have in a exploitable format the failed binds. Something similar
to the correct binds in the accesslog. I have seen that some people talks
about the use of loglevel 256, but i thing that is too hard. Any help would
be welcome.
Why don't use the pwdFailureTime attribute provided by ppolicy overlay?
Clément.
2:50 a.m.
Thanks Clément,
Yes i saw this option but i have a problem, i need save a history of failed
binds. And with ppolicy only have the last one, no?
David.
On Wed, Jan 15, 2014 at 11:31 AM, Clément OUDOT <clem.oudot(a)gmail.com>wrote:
2014/1/15 David Tello <david.tello.wbsgo(a)gmail.com>
>
> I need to have in a exploitable format the failed binds. Something
> similar to the correct binds in the accesslog. I have seen that some people
> talks about the use of loglevel 256, but i thing that is too hard. Any help
> would be welcome.
>
>
Why don't use the pwdFailureTime attribute provided by ppolicy overlay?
Clément.
2:52 a.m.
2014/1/15 David Tello <david.tello.wbsgo(a)gmail.com>
Thanks Clément,
Yes i saw this option but i have a problem, i need save a history of
failed binds. And with ppolicy only have the last one, no?
Yes.
So use accesslog overlay or syslog for that. I don't think it is too hard.
Clément.
3:41 a.m.
Thanks again Clément,
I think that the accesslog only register the correct binds, i don't know if
there is a configuration to indicate to accesslog that it must register the
failed binds too. Do you know it? The other option is read to the syslog,
no? it's posible configure the log level to get only the access events?
Thanks!
On Wed, Jan 15, 2014 at 11:52 AM, Clément OUDOT <clem.oudot(a)gmail.com>wrote:
2014/1/15 David Tello <david.tello.wbsgo(a)gmail.com>
> Thanks Clément,
>
> Yes i saw this option but i have a problem, i need save a history of
> failed binds. And with ppolicy only have the last one, no?
>
Yes.
So use accesslog overlay or syslog for that. I don't think it is too hard.
Clément.
4:34 a.m.
2014/1/15 David Tello <david.tello.wbsgo(a)gmail.com>
Thanks again Clément,
I think that the accesslog only register the correct binds, i don't know
if there is a configuration to indicate to accesslog that it must register
the failed binds too. Do you know it? The other option is read to the
syslog, no? it's posible configure the log level to get only the access
events?
man slapo-accesslog :
logsuccess TRUE | FALSE
If set to TRUE then log records will only be generated for
successful requests, i.e., requests that produce a result code of 0
(LDAP_SUCCESS). If
FALSE, log records are generated for all requests whether
they succeed or not. The default is FALSE.
Clément.
4:46 a.m.
Thanks Clements,
is true, i had this mistake in my configuration.
Thanks a lot for your time!
3:44 a.m.
Thanks Michael,
but are you sure that the slapo-accesslog register the failed binds? i
thinks that only register the correct binds.
I will try this.
Thanks
On Wed, Jan 15, 2014 at 12:30 PM, Michael Ströder <michael(a)stroeder.com>wrote:
David Tello wrote:
> Thanks Clément,
>
> Yes i saw this option but i have a problem, i need save a history of
failed
> binds. And with ppolicy only have the last one, no?
Another option is to use slapo-accesslog (logops session).
But you will get many DB entries.
Ciao, Michael.
4:44 a.m.
Hi Miguel,
you were right, logsuccess had TRUE. Now i change the value to false and
the failed binds are registred en the accesslog.
Thanks a lot!
On Wed, Jan 15, 2014 at 12:52 PM, Michael Ströder <michael(a)stroeder.com>wrote:
David Tello wrote:
> but are you sure that the slapo-accesslog register the failed binds?
It should if you use logsuccess FALSE which is the default according to the
man page.
Ciao, Michael.
8:41 a.m.
Am Wed, 15 Jan 2014 11:08:04 +0100
schrieb David Tello <david.tello.wbsgo(a)gmail.com>:
I need to have in a exploitable format the failed binds. Something
similar to the correct binds in the accesslog. I have seen that some
people talks about the use of loglevel 256, but i thing that is too
hard. Any help would be welcome.
set loglevel acl, see man slapd.conf(5), which logs acl parsing to
syslog.
-Dieter
--
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID: E9ED159B
53°37'09,95"N
10°08'02,42"E
3609
days inactive
3609
days old
openldap-technical@openldap.org
11 comments
4 participants
participants (4)
-
Clément OUDOT -
David Tello -
Dieter Klünter -
Michael Ströder