Logging LDAP queries with samba4

[Indexer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On 03/01/2011, at 08:06, Andrew Bartlett wrote:

> On Sun, 2011-01-02 at 13:30 +1030, Indexer wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> 
>> Hi,
>> 
>> I have been using samba4 with nss_ldap. I have had a number of issues with this, as i believe that nss may not be searching for the correct attributes or otherwise. On openldap, normally i open up the slapd.log, and find what queries have been issued (if any at all) to try and narrow down missing attributes etc.
>> 
>> Is there a way to log the incoming ldap queries into samba4 in a similar method?
> 
> In short, not easily.  You can turn up the debug level, level 10 will
> put ldb into a trace mode that will tell you far more than you ever
> wanted to know, but if the connection isn't encrypted, I would suggest
> wireshark. 
> 
> (We may log some details at lower levels, I've not reviewed the code
> specifically).

Okay, Ill do that then. I can quite easily turn of TLS, so wireshark looks like the go. Perhaps it would be useful to consider adding such a logging output in the future, as it does make debugging alot easier, and will certainly help with the unix side of integration.

> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett                                http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
> Samba Developer, Cisco Inc.
> 

William Brown

pgp.mit.edu



-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.16 (Darwin)

iQIcBAEBAgAGBQJNIQArAAoJEHF16AnLoz6JgUEQAMA9H1RnQDuVQyrGouEu2tb/
ZfaLuP3gwLKCOQX7rCkLrn2c/4NRkjLX3EL7mGk2kE6rTmGcic0agVgSIFJIEo4G
E6wUrRW62sxnNWB82H92rkilRRNaYrAZ6rG2kCmsOF/wznYf9vho3VSluglhTc5M
S61YZGJvBRyn66fA4eS6LjUufNAR1pAwfofvkWk55eRO1rRAD+KhMHcb71o1OCxk
Gg+puAsCArAU6AIxDz+xVZ4DwyTZI4t8zApnwooX49Vl8tQU17iG3G3zw31/piC9
XJtrDBWoJ8RgxTNUkPXGkyxr86zUJjnBQVvrYouaxCTcsK7sI8wVY26e4vXyft01
DNJyqlTxVU5//RMv17kljzBQDeZxvOJwdPQm1Bs1RTGn8JuxqDSSoRFSzEEbOZpL
rO+zPhynDhTJXd3kV8TNn6bsworjdivTDQvHC9osgRZaEXr7leekMlKN/TYNBr15
xNwCrqB21KakljBX3NgxjMkYPLlAY0RrNmj9K15Y4Co4K1HSQfhmibv51FNllG0f
6SCrjIyocVCvxcSqC0zO4GZaoYLMm3V2wxG1KVIJ0AaWXAb7bcD6IpzOvSxr9BNh
/AAY7hiAvQcUkChpnUxqZxLDKBX41GnEj96VhSAyMNyAs7xLmkCtr/ry+cJmlKly
P5+qGmvgLrmIZvaKD+FN
=KEhW
-----END PGP SIGNATURE-----