Thanks Clément,

Yes i saw this option but i have a problem, i need save a history of failed binds. And with ppolicy only have the last one, no?

David.

On Wed, Jan 15, 2014 at 11:31 AM, Clément OUDOT clem.oudot@gmail.comwrote:

2014/1/15 David Tello david.tello.wbsgo@gmail.com

...

I need to have in a exploitable format the failed binds. Something similar to the correct binds in the accesslog. I have seen that some people talks about the use of loglevel 256, but i thing that is too hard. Any help would be welcome.

Why don't use the pwdFailureTime attribute provided by ppolicy overlay?

Clément.

Thanks again Clément,

I think that the accesslog only register the correct binds, i don't know if there is a configuration to indicate to accesslog that it must register the failed binds too. Do you know it? The other option is read to the syslog, no? it's posible configure the log level to get only the access events?

Thanks!

On Wed, Jan 15, 2014 at 11:52 AM, Clément OUDOT clem.oudot@gmail.comwrote:

2014/1/15 David Tello david.tello.wbsgo@gmail.com

...

Thanks Clément,

Yes i saw this option but i have a problem, i need save a history of failed binds. And with ppolicy only have the last one, no?

Yes.

So use accesslog overlay or syslog for that. I don't think it is too hard.

Clément.

Thanks Clements,

is true, i had this mistake in my configuration.

Thanks a lot for your time!

Thanks Michael,

but are you sure that the slapo-accesslog register the failed binds? i thinks that only register the correct binds. I will try this.

Thanks

On Wed, Jan 15, 2014 at 12:30 PM, Michael Ströder michael@stroeder.comwrote:

David Tello wrote:

...

Thanks Clément,

Yes i saw this option but i have a problem, i need save a history of

failed

...

binds. And with ppolicy only have the last one, no?

Another option is to use slapo-accesslog (logops session). But you will get many DB entries.

Ciao, Michael.

Hi Miguel,

you were right, logsuccess had TRUE. Now i change the value to false and the failed binds are registred en the accesslog.

Thanks a lot!

On Wed, Jan 15, 2014 at 12:52 PM, Michael Ströder michael@stroeder.comwrote:

David Tello wrote:

...

but are you sure that the slapo-accesslog register the failed binds?

It should if you use logsuccess FALSE which is the default according to the man page.

Ciao, Michael.