Just to be 100% sure of what LSC should do :
- dry-run mode should record what operations should be done without doing
them
- normal mode record both successful and erroneous operations

Regards,
-- 
Sebastien BAHLOUL
IAM / Security specialist
Ldap Synchronization Connector : http://lsc-project.org
Blog : http://sbahloul.wordpress.com/



2012/4/24 Hugh Kelley <[email protected]>

> Thank you.  In retrospect, I understand (that it will not record/audit
> what it has not actually done - hence the need for the dry run parameter to
> bypass the error).
>
> I'm getting entries now.
>
> dn: OU=Desktops,OU=US Scottsdale,dc=lsc-project,dc=org
> changetype: add
> ou: Desktops
> name: Desktops
>
> Regards,
> Hugh
>
>
> On Tue, Apr 24, 2012 at 8:40 AM, Sébastien Bahloul <
> [email protected]> wrote:
>
>> Hi Hugh,
>>
>> If you try to run LSC on a dry-run, switch to DEBUG loglevel for LDIF
>> logger.
>>
>> Regards,
>>
>> --
>> Sebastien BAHLOUL
>> IAM / Security specialist
>> Ldap Synchronization Connector : http://lsc-project.org
>> Blog : http://sbahloul.wordpress.com/
>>
>>
>>
>> 2012/4/24 Hugh Kelley <[email protected]>
>>
>>> Gladly.
>>>
>>> # # #
>>>
>>> <?xml version="1.0" encoding="UTF-8"?>
>>>
>>> <configuration>
>>>
>>>     <!-- standard output to console -->
>>>     <appender name="CONSOLE" class="ch.qos.logback.core.ConsoleAppender">
>>>         <encoder
>>> class="ch.qos.logback.core.encoder.LayoutWrappingEncoder">
>>>             <layout class="org.lsc.utils.output.LdifLayout">
>>>                 <Pattern>%date{MMM dd HH:mm:ss} - %-5level -
>>> %message%n</Pattern>
>>>             </layout>
>>>         </encoder>
>>>     </appender>
>>>
>>>     <!-- log all application messages to the file /tmp/lsc.log -->
>>>
>>>     <!-- this file is rotated every 10000KB, compressed and 7 files are
>>> kept for history -->
>>>      <appender name="LSC"
>>> class="ch.qos.logback.core.rolling.RollingFileAppender">
>>>         <Append>true</Append>
>>>         <File>${LSC_HOME}/logs/lsc.log</File>
>>>
>>>         <layout class="org.lsc.utils.output.LdifLayout">
>>>             <Pattern>%date{MMM dd HH:mm:ss} - %-5level -
>>> %message%n</Pattern>
>>>         </layout>
>>>
>>>         <filter class="ch.qos.logback.classic.filter.ThresholdFilter">
>>>             <level>INFO</level>
>>>         </filter>
>>>
>>>         <rollingPolicy
>>> class="ch.qos.logback.core.rolling.FixedWindowRollingPolicy">
>>>             <FileNamePattern>lsc.log.%i.gz</FileNamePattern>
>>>
>>>             <MinIndex>1</MinIndex>
>>>             <MaxIndex>7</MaxIndex>
>>>         </rollingPolicy>
>>>
>>>         <triggeringPolicy
>>> class="ch.qos.logback.core.rolling.SizeBasedTriggeringPolicy">
>>>             <MaxFileSize>10000KB</MaxFileSize>
>>>         </triggeringPolicy>
>>>     </appender>
>>>
>>>     <!-- special logger to have a LDIF file of all modifications applied
>>> -->
>>>     <!-- this file is rotated every 10000KB, compressed and 7 files are
>>> kept for history -->
>>>     <appender name="LDIF"
>>> class="ch.qos.logback.core.rolling.RollingFileAppender">
>>>         <!--See also
>>> http://logback.qos.ch/manual/appenders.html#RollingFileAppender-->
>>>         <Append>true</Append>
>>>         <File>/tmp/lsc.ldif</File>
>>>
>>>         <layout class="org.lsc.utils.output.LdifLayout">
>>>             <Pattern>%m%n</Pattern>
>>>             <logOperations>create,update</logOperations>
>>>             <onlyLdif>true</onlyLdif>
>>>         </layout>
>>>
>>>         <filter class="ch.qos.logback.classic.filter.ThresholdFilter">
>>>             <level>DEBUG</level>
>>>         </filter>
>>>
>>>         <rollingPolicy
>>> class="ch.qos.logback.core.rolling.FixedWindowRollingPolicy">
>>>             <FileNamePattern>lsc.ldif.%i.gz</FileNamePattern>
>>>             <MinIndex>1</MinIndex>
>>>             <MaxIndex>7</MaxIndex>
>>>         </rollingPolicy>
>>>
>>>         <triggeringPolicy
>>> class="ch.qos.logback.core.rolling.SizeBasedTriggeringPolicy">
>>>             <MaxFileSize>10000KB</MaxFileSize>
>>>         </triggeringPolicy>
>>>     </appender>
>>>
>>>     <!-- link log sources and log appenders -->
>>>     <logger name="communicationLogger" level="WARN">
>>>         <appender-ref ref="CONSOLE"/>
>>>     </logger>
>>>     <logger name="org.lsc" level="WARN">
>>>         <appender-ref ref="LSC"/>
>>>     </logger>
>>>     <logger name="lsc" level="INFO">
>>>
>>>         <appender-ref ref="LDIF"/>
>>>     </logger>
>>>     <logger name="org.apache" level="WARN">
>>>         <appender-ref ref="CONSOLE"/>
>>>     </logger>
>>>     <logger name="poolLogger" level="ERROR">
>>>         <appender-ref ref="CONSOLE"/>
>>>     </logger>
>>>     <root level="DEBUG">
>>>         <appender-ref ref="CONSOLE"/>
>>>     </root>
>>> </configuration>
>>>
>>>
>>>
>>>
>>> On Tue, Apr 24, 2012 at 8:31 AM, Sébastien Bahloul <
>>> [email protected]> wrote:
>>>
>>>> Hi Hugh,
>>>>
>>>> First, can you provide your complete logback.xml file because some
>>>> other items may have impact on your issue ?
>>>>
>>>> The logger that should be using the described appender is the following
>>>> :
>>>>  <logger name="lsc" level="DEBUG">
>>>> <appender-ref ref="LDIF"/>
>>>>  </logger>
>>>>
>>>> Can you describe the way you are trying to use LSC ? It seems that you
>>>> are running a synchronization task to an Active Directory that is
>>>> redirecting you because your DN seems not to be hosted on the server you
>>>> are reaching.
>>>>
>>>> Regards,
>>>> --
>>>> Sebastien BAHLOUL
>>>> IAM / Security specialist
>>>> Ldap Synchronization Connector : http://lsc-project.org
>>>> Blog : http://sbahloul.wordpress.com/
>>>>
>>>>
>>>>
>>>> 2012/4/24 Hugh Kelley <[email protected]>
>>>>
>>>>>  I am encountering some errors on the modification side of my sync
>>>>> task.   It would be helpful to see the to-be-applied settings in an LDIF
>>>>> file.  It is my understanding that this is what auditing can do, but I
>>>>> can't yet generate any files.
>>>>>
>>>>> Per the online instructions, I have left the <audits/> section of
>>>>> lsc.xml empty and put the following in logback.xml:
>>>>>
>>>>>     <!-- special logger to have a LDIF file of all modifications
>>>>> applied -->
>>>>>     <!-- this file is rotated every 10000KB, compressed and 7 files
>>>>> are kept for history -->
>>>>>     <appender name="LDIF"
>>>>> class="ch.qos.logback.core.rolling.RollingFileAppender">
>>>>>         <!--See also
>>>>> http://logback.qos.ch/manual/appenders.html#RollingFileAppender-->
>>>>>         <Append>true</Append>
>>>>>         <File>/tmp/lsc.ldif</File>
>>>>>
>>>>>         <layout class="org.lsc.utils.output.LdifLayout">
>>>>>             <Pattern>%m%n</Pattern>
>>>>>             <logOperations>create,update</logOperations>
>>>>>             <onlyLdif>true</onlyLdif>
>>>>>         </layout>
>>>>>
>>>>>         <filter class="ch.qos.logback.classic.filter.ThresholdFilter">
>>>>>             <level>DEBUG</level>
>>>>>         </filter>
>>>>>
>>>>>         <rollingPolicy
>>>>> class="ch.qos.logback.core.rolling.FixedWindowRollingPolicy">
>>>>>             <FileNamePattern>lsc.ldif.%i.gz</FileNamePattern>
>>>>>             <MinIndex>1</MinIndex>
>>>>>             <MaxIndex>7</MaxIndex>
>>>>>         </rollingPolicy>
>>>>>
>>>>>         <triggeringPolicy
>>>>> class="ch.qos.logback.core.rolling.SizeBasedTriggeringPolicy">
>>>>>             <MaxFileSize>10000KB</MaxFileSize>
>>>>>         </triggeringPolicy>
>>>>>     </appender>
>>>>>
>>>>>
>>>>> The /tmp/lsc.ldif file contains a single line:
>>>>>
>>>>>     Starting sync for MySyncTask-OUs
>>>>>
>>>>>
>>>>> As an aside, the error I'm trying to sort out is this:
>>>>>
>>>>> ERROR - Error while adding entry  in directory
>>>>> :javax.naming.PartialResultException:
>>>>>     [LDAP: error code 10 - 0000202B: RefErr: DSID-031007EF, data 0, 1
>>>>> access points        ref 1: 'org' ];
>>>>> remaining name '/'
>>>>>
>>>>> Hugh
>>>>>
>>>>> _______________________________________________________________
>>>>> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>>>>>
>>>>> lsc-users mailing list
>>>>> [email protected]
>>>>> http://lists.lsc-project.org/listinfo/lsc-users
>>>>>
>>>>>
>>>>
>>>
>>> _______________________________________________________________
>>> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>>>
>>> lsc-users mailing list
>>> [email protected]
>>> http://lists.lsc-project.org/listinfo/lsc-users
>>>
>>>
>>
>
> _______________________________________________________________
> Ldap Synchronization Connector (LSC) - http://lsc-project.org
>
> lsc-users mailing list
> [email protected]
> http://lists.lsc-project.org/listinfo/lsc-users
>
>
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to