Fedora directory users - May 2006 - Question on server log monitoring

I''m attempting to monitor fds logs for things such as password changes,
and so forth; I''m assuming that the log file that I should be looking
for is the access logfile under my slapd directory; does anyone know the
operation number (op=?) that I should be looking for to check for
successful password changes (assuming of course that fds is recording
this information and that I''m looking in the proper logfile?  Thanks
very much.

Aaron

Confidentiality Notice:
The information contained in this electronic message is intended for the
exclusive use of the individual or entity named above and may contain privileged
or confidential information.  If the reader of this message is not the intended
recipient or the employee or agent responsible to deliver it to the intended
recipient, you are hereby notified that dissemination, distribution or copying
of this information is prohibited.  If you have received this communication in
error, please notify the sender immediately by telephone and destroy the copies
you received.

Bliss, Aaron wrote:
> I''m attempting to monitor fds logs for things such as password
changes,
> and so forth; I''m assuming that the log file that I should be
looking
> for is the access logfile under my slapd directory; does anyone know the
> operation number (op=?) that I should be looking for to check for
> successful password changes (assuming of course that fds is recording
> this information and that I''m looking in the proper logfile? 
Thanks
> very much.
>   
Regular logging doesn''t record this level of detail.  The access log 
records that a MOD operation occurred to a certain DN, but it doesn''t 
tell you what attrs were modified.

You can enable audit logging - this will log all writes to the file 
audit in the logs directory.  If you want this information to be 
available via ldap, you could try enabling the Retro Changelog program, 
which will give you a suffix cn=changelog which will hold the
changes.
> Aaron
>
> Confidentiality Notice:
> The information contained in this electronic message is intended for the
exclusive use of the individual or entity named above and may contain privileged
or confidential information.  If the reader of this message is not the intended
recipient or the employee or agent responsible to deliver it to the intended
recipient, you are hereby notified that dissemination, distribution or copying
of this information is prohibited.  If you have received this communication in
error, please notify the sender immediately by telephone and destroy the copies
you received.
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>