Fedora directory users - Nov 2006 - Auditing attribute changes

Hi,
	is there any way how to log changes to selected attribute only? I would 
need to monitor changes of user password (users claim that their 
password sometimes stops working and I have to reset them). It would be 
enough to audit LDAP modifications on all attributes, I think that retro 
changelog plugin would help, but I do not know how to configure it... Is 
there any documentation for this plugin?


Radek

Radek Hladik wrote:
> Hi,
>     is there any way how to log changes to selected attribute only?
No.  Both the retro changelog and the audit log contain every change to 
every attribute.
> I would need to monitor changes of user password (users claim that 
> their password sometimes stops working and I have to reset them). It 
> would be enough to audit LDAP modifications on all attributes, I think 
> that retro changelog plugin would help, but I do not know how to 
> configure it... Is there any documentation for this plugin?
http://www.redhat.com/docs/manuals/dir-server/ag/7.1/replicat.html#1107718

You might also want to investigate the audit log:
http://www.redhat.com/docs/manuals/dir-server/ag/7.1/dsstats.html#1092377
>
>
> Radek
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

Richard Megginson napsal(a):
> Radek Hladik wrote:
>> Hi,
>>     is there any way how to log changes to selected attribute only?
> No.  Both the retro changelog and the audit log contain every change to 
> every attribute.
>> I would need to monitor changes of user password (users claim that 
>> their password sometimes stops working and I have to reset them). It 
>> would be enough to audit LDAP modifications on all attributes, I think 
>> that retro changelog plugin would help, but I do not know how to 
>> configure it... Is there any documentation for this plugin?
> http://www.redhat.com/docs/manuals/dir-server/ag/7.1/replicat.html#1107718
> 
> You might also want to investigate the audit log:
> http://www.redhat.com/docs/manuals/dir-server/ag/7.1/dsstats.html#1092377
>>
I''ve already enabled both of them and it seems to me that audit log 
contains more detailed information. I would need the IP of the user 
performing the modification but I think that I will be able to look it 
up in the access log.


Radek