Logging LDAP queries with samba4

[Andrew Bartlett]

On Sun, 2011-01-02 at 13:30 +1030, Indexer wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi,
> 
> I have been using samba4 with nss_ldap. I have had a number of issues with this, as i believe that nss may not be searching for the correct attributes or otherwise. On openldap, normally i open up the slapd.log, and find what queries have been issued (if any at all) to try and narrow down missing attributes etc.
> 
> Is there a way to log the incoming ldap queries into samba4 in a similar method?

In short, not easily.  You can turn up the debug level, level 10 will
put ldb into a trace mode that will tell you far more than you ever
wanted to know, but if the connection isn't encrypted, I would suggest
wireshark. 

(We may log some details at lower levels, I've not reviewed the code
specifically).

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.