Re: slapo-accesslog: wrong timestamp microseconds

2016-02-18 Thread Dario Zanzico
n. > > The fractional part is a simple counter in reqstart/reqend, not true > microseconds. Ok, for my use-case this is not a problem, but won't this break ordering? If collecting events from slapo-accesslog filtered by 'reqstart>=$last_read_reqstart' this means $last_read_reqstart should b

Re: slapo-accesslog: wrong timestamp microseconds

2016-02-18 Thread Howard Chu
Dario Zanzico wrote: In adding an accesslog overlay I noticed something strange with the reqstart and reqend fields: the fractional part always begins with 000 and has this strange distribution. The fractional part is a simple counter in reqstart/reqend, not true microseconds. This is on

Re: slapo-accesslog: wrong timestamp microseconds

2016-02-18 Thread Dario Zanzico
I forgot: openldap 2.4.44 (LTB build) on rhel 6 dario

slapo-accesslog: wrong timestamp microseconds

2016-02-18 Thread Dario Zanzico
In adding an accesslog overlay I noticed something strange with the reqstart and reqend  fields: the fractional part always begins with 000 and has this strange distribution. > $ ldapsearch . | awk -F . '/^reqStart: / {print $2}'| sort | uniq > -c  2 00Z 351 01Z 73 02Z 70 03Z

slapo-accesslog and extended operations

2015-06-07 Thread Michael Ströder
HI! First of all: For me slapo-accesslog is one of OpenLDAP's killer features. I'm currently wondering about logging of extended operations in particular Password Modify ext. op. I see the resulting auditModify entries but I'd also like to see eventually refused auditExtended entries (e.g

Re: slapo-accesslog

2014-02-13 Thread Clément OUDOT
2014-02-12 5:56 GMT+01:00 Michael mlstarlin...@hotmail.com: I'm trying to configure a means to be able to get the lastlogin time for users in my environment. However, since I'm stuck using the RHEL version of OpenLDAP I can't take advantage of the lastbind overlay You can have a look to LTB

Re: slapo-accesslog

2014-02-12 Thread Michael
On Feb 12, 2014, at 3:07 AM, Dieter Klünter die...@dkluenter.de wrote: Am Tue, 11 Feb 2014 23:56:23 -0500 schrieb Michael mlstarlin...@hotmail.com: I'm trying to configure a means to be able to get the lastlogin time for users in my environment. However, since I'm stuck using the RHEL

Re: slapo-accesslog

2014-02-12 Thread Howard Chu
Michael wrote: On Feb 12, 2014, at 3:07 AM, Dieter Klünter die...@dkluenter.de wrote: Am Tue, 11 Feb 2014 23:56:23 -0500 schrieb Michael mlstarlin...@hotmail.com: I'm trying to configure a means to be able to get the lastlogin time for users in my environment. However, since I'm stuck

RE: slapo-accesslog

2014-02-12 Thread Michael
Date: Wed, 12 Feb 2014 14:20:09 -0800 From: h...@symas.com To: mlstarlin...@hotmail.com; die...@dkluenter.de CC: openldap-technical@openldap.org Subject: Re: slapo-accesslog Michael wrote: On Feb 12, 2014, at 3:07 AM, Dieter Klünter die...@dkluenter.de wrote: Am Tue, 11 Feb

slapo-accesslog

2014-02-11 Thread Michael
I'm trying to configure a means to be able to get the lastlogin time for users in my environment. However, since I'm stuck using the RHEL version of OpenLDAP I can't take advantage of the lastbind overlay Here's my config. overlay accesslog logdb cn=accesslog logops bind logsuccess TRUE # scan

Re: slapo-accesslog

2014-02-11 Thread Dieter Klünter
Am Tue, 11 Feb 2014 23:56:23 -0500 schrieb Michael mlstarlin...@hotmail.com: I'm trying to configure a means to be able to get the lastlogin time for users in my environment. However, since I'm stuck using the RHEL version of OpenLDAP I can't take advantage of the lastbind overlay Here's my

Re: slapo-accesslog

2011-04-12 Thread Tim Gustafson
http://prefetch.net/code/ldap-stats.pl.html If you give it a log from loglevel 256 (stats logging) in OpenLDAP, it will generate all sorts of useful information for you. Very cool; thanks! This is exactly what I think I'm looking for. Tim Gustafson Baskin School of Engineering UC Santa Cruz

Re: slapo-accesslog

2011-04-11 Thread Tim Gustafson
There are scripts which parse the normal syslog output and output statistics. Or simply search the accesslog database in the given time frame. Can you point me to such scripts? As I mentioned in my original e-mail, using the accesslog overlay won't work for us; it produces too much load (and

Re: slapo-accesslog

2011-04-10 Thread Michael Ströder
Tim Gustafson wrote: I was wondering if there was an overlay that worked somewhat like the slapo-accesslog overlay, but instead of logging the information to another OpenLDAP database, I'd like the data to be written to a CSV file or something similar. Does such a beast exist? slapo-auditlog

Re: slapo-accesslog

2011-04-10 Thread Tim Gustafson
slapo-auditlog writes to a LDIF file. But deploying the overlay today is not recommended. Don't remember the details though. slapo-autitlog is for auditing -updates- to the LDAP data. I need to log -queries- to the LDAP data. But writing to a CSV file seems odd anyway. What exactly do you

Re: slapo-accesslog

2011-04-10 Thread Michael Ströder
Tim Gustafson wrote: I want to be able to generate a monthly/weekly/daily report that tells me which clients have been hitting the OpenLDAP server hardest, in terms of read queries. There are scripts which parse the normal syslog output and output statistics. Or simply search the accesslog

slapo-accesslog

2011-04-09 Thread Tim Gustafson
Hi, I was wondering if there was an overlay that worked somewhat like the slapo-accesslog overlay, but instead of logging the information to another OpenLDAP database, I'd like the data to be written to a CSV file or something similar. Does such a beast exist? Tim Gustafson Baskin School

slapo-accesslog on remote ldap server

2011-01-05 Thread Marco Pizzoli
Hi all, I would like to know if is it possibile to have accesslog overlay to write to a remote ldap server. I have 2 OL instances and I would like to aggregate accesslog data on 1 server dedicated to serve accesslog query. Thanks in advance Marco -- _

Re: slapo-accesslog on remote ldap server

2011-01-05 Thread masarati
Hi all, I would like to know if is it possibile to have accesslog overlay to write to a remote ldap server. I have 2 OL instances and I would like to aggregate accesslog data on 1 server dedicated to serve accesslog query. In principle, yes (not tested). Log to an ldap database pointing