Re: [389-users] access to LDAP log/access file to non admin users

2015-08-12 Thread Paul Whitney
Sorry, the detail of not letting them log in escaped me.  So sudo or ACL is not going to work for you.  Perhaps, a cron job that pulls a copy of the log to the developer accessible server.  The apply the sudo or ACL on that developer accessible server. Paul M. Whitney E-mail: paul.whit...@mac.c

Re: [389-users] access to LDAP log/access file to non admin users

2015-08-12 Thread Paul Whitney
Or alternatively, create a sudo role that allows them to use the /bin/less or /bin/more command on the particular logs of interest. Paul M. Whitney E-mail: paul.whit...@mac.com Sent from my browser. On Aug 12, 2015, at 12:57 PM, ghiureai wrote: Hi List, I need a nice , clean solution to give

Re: [389-users] access to LDAP log/access file to non admin users

2015-08-12 Thread Paul Whitney
You could add an ACL with readonly permissions to those logs by by userid or groupid. Paul M. Whitney E-mail: paul.whit...@mac.com Sent from my browser. On Aug 12, 2015, at 12:57 PM, ghiureai wrote: Hi List, I need a nice , clean solution to give access to LDAP error log and access file to

Re: [389-users] access to LDAP log/access file to non admin users

2015-08-12 Thread Kevin Kelly
Hi, If your developers are willing to work with logs sent to a syslog server that they have access to, you can do something like the: vi /etc/rsyslog.conf Add the following line near the top of the file: $ModLoad imfile Add the following lines towards the bottom of the file: # LDAP Logging lo

[389-users] access to LDAP log/access file to non admin users

2015-08-12 Thread ghiureai
Hi List, I need a nice , clean solution to give access to LDAP error log and access file to developers team on our prod ldap , mentioned I they will not be allowed to log in the actual LDAP host, at present time dev's are using Appache Studio Thank you for all your input -- 389 users maili