Q. LDAP - Why should i pay attention to my directory server access logs?

Posted by : Dr. Root | 16 May, 2006 | Published in

By examining your directory server access logs you can get an overview as to how the directory server is performing.

By default the directory server's access log is in the following location

//slapd-serverID/logs/access


eg.

/home/drroot/ldap/slapd-ldap01/logs/access

The Directory Server access log contains detailed information about client connections to the directory. A connection is a sequence of requests from the same client with the following structure:

  • Connection record that gives the connection index and the IP address of the client
  • Bind record
  • Bind result record
  • Sequence of operation request / operation result pairs of records (or individual records in the case of connection, closed, and abandon records)
  • Unbind record
  • Closed record

A typical access log entry, with default access logging level, looks like the following:

[15/May/2006:15:08:38 +0100] conn=13404 op=-1 msgId=-1 - fd=70 slot=70 LDAP connection from 127.0.0.1 to 127.0.0.1[15/May/2006:15:08:38 +0100] conn=13404 op=0 msgId=1 - BIND dn="cn=directory manager" method=128 version=3
[15/May/2006:15:08:38 +0100] conn=13404 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"
[15/May/2006:15:08:38 +0100] conn=13404 op=1 msgId=2 - SRCH base="o=internet" scope=2 filter="(uid=askdrroot)" attrs=ALL
[15/May/2006:15:08:38 +0100] conn=13404 op=1 msgId=2 - RESULT err=0 tag=101 nentries=1 etime=0
[15/May/2006:15:08:38 +0100] conn=13404 op=2 msgId=3 - UNBIND
[15/May/2006:15:08:38 +0100] conn=13404 op=2 msgId=-1 - closing - U1
[15/May/2006:15:08:39 +0100] conn=13404 op=-1 msgId=-1 - closed.

(0) Comments

Copyright 2005-2010, ask|dr.root, brought to you by Avnet Technology Solutions