-----Ursprüngliche Nachricht-----
Von:    Ulrich Windl <[email protected]>
Gesendet:       Do 16.10.2014 13:46
Betreff:        Q: accesslog and sessions
An:     [email protected]; 
> Hi!
> 
> I have configured accesslog for modification (attempts) in a multi-master 
> configuration. Comparing accesslogs after some changes, I find some issues 
> (openLDAP 2.4.26 of SLES11 SP3):
> 
> On the originating server the "reqSession" varies with the connection made, 
> while on a replication consumer the "reqSession" seems fixed (always 2 in one 
> case).

'cause of replication.

>  Also on the originating server I see the authenticated DN in 
> "reqAuthzID", while on the replication consumer it seems to be always 
> "cn=Admin,dc=example,dc=org". "reqStart" and "reqEnd" are also local for the 
> LDAP server.

'cause the repl consumer writes to the database as admin user.

> 
> Now at least I have a problem with "reqSession": If you examine accesslog at 
> some later time, those volatile session IDs don't tell you anything anymore 
> (e.g. the host that opened the connection). Could acesslog be modified to add 
> some details from the session (like monitorConnectionPeerAddress, 
> monitorConnectionStartTime)?
> 
> Regards,
> Ulrich Windl
> 

This woule be a very nice feature, indeed.

> 
>

Reply via email to