Re: [net-ldapapi-software] LDAPapi and aliases

[Dieter K. <di...@dk...>]

Quanah Gibson-Mount <qu...@zi...> writes:

> --On Wednesday, September 17, 2008 8:00 PM +0200 Dieter Kluenter
> <di...@dk...> wrote:
>
>> Quanah Gibson-Mount <qu...@zi...> writes:
>>
>>> --On Wednesday, September 17, 2008 11:08 AM +0200 Dieter Kluenter
>>> <di...@dk...> wrote:
>>>

[...]
>> ,----[ slapd.log ]
>>| slapd[3052]: => acl_mask: to value by "cn=dieter
>>| kluenter,ou=partner,o=avci,c=de", (=0)  slapd[3052]: <= check a_dn_pat: *
>>| slapd[3052]: <= acl_mask: [2] applying read(=rscxd) (stop)
>>| slapd[3052]: <= acl_mask: [2] mask: read(=rscxd)
>>| slapd[3052]: => slap_access_allowed: read access granted by read(=rscxd)
>>| slapd[3052]: => access_allowed: read access granted by read(=rscxd)
>>| slapd[3052]: conn=22 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text=
>>| slapd[3052]: conn=22 op=4 UNBIND
>>| slapd[3052]: conn=22 fd=18 closed
>
> This log snippet fails to include the filter that was used, which is
> what I need to see.
>
> For example, mine shows:
>
> Sep 17 10:18:59 freelancer slapd[28153]: conn=11826 op=2 SRCH
> base="ou=people,dc=freelancer,dc=lab,dc=zimbra,dc=com" scope=2 deref=0
> filter="(uid=testus*)"
>
> at stats level logging.  Perhaps this is a shell issue, since you're
> running this from the command line, and haven't quoted the query?

OK, this snipped shows just the last attribute 'mobile', access has
been granted to all other attributs as well.

,----[ slapd.log ]
| [3052]: => acl_get: [4] attr mobile
| [3052]: => slap_access_allowed: result not in cache (mobile)
| [3052]: => acl_mask: access to entry "cn=Rosemarie Hein,ou=adressbuch,o=avci,c=de", attr "mobile" requested
| [3052]: => acl_mask: to value by "cn=dieter kluenter,ou=partner,o=avci,c=de", (=0) 
| [3052]: <= check a_dn_pat: cn=admanager,o=avci,c=de
| [3052]: <= check a_dn_pat: *
| [3052]: <= acl_mask: [2] applying read(=rscxd) (stop)
| [3052]: <= acl_mask: [2] mask: read(=rscxd)
| [3052]: => slap_access_allowed: read access granted by read(=rscxd)
| [3052]: => access_allowed: read access granted by read(=rscxd)
| [3052]: conn=28 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text=
| [3052]: conn=28 op=4 UNBIND
| [3052]: conn=28 fd=18 closed
`----


-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6
53°08'09,95"N
10°08'02,42"E