From: Dieter K. <di...@dk...> - 2008-09-17 19:09:23
|
Quanah Gibson-Mount <qu...@zi...> writes: > --On Wednesday, September 17, 2008 8:00 PM +0200 Dieter Kluenter > <di...@dk...> wrote: > >> Quanah Gibson-Mount <qu...@zi...> writes: >> >>> --On Wednesday, September 17, 2008 11:08 AM +0200 Dieter Kluenter >>> <di...@dk...> wrote: >>> [...] >> ,----[ slapd.log ] >>| slapd[3052]: => acl_mask: to value by "cn=dieter >>| kluenter,ou=partner,o=avci,c=de", (=0) slapd[3052]: <= check a_dn_pat: * >>| slapd[3052]: <= acl_mask: [2] applying read(=rscxd) (stop) >>| slapd[3052]: <= acl_mask: [2] mask: read(=rscxd) >>| slapd[3052]: => slap_access_allowed: read access granted by read(=rscxd) >>| slapd[3052]: => access_allowed: read access granted by read(=rscxd) >>| slapd[3052]: conn=22 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= >>| slapd[3052]: conn=22 op=4 UNBIND >>| slapd[3052]: conn=22 fd=18 closed > > This log snippet fails to include the filter that was used, which is > what I need to see. > > For example, mine shows: > > Sep 17 10:18:59 freelancer slapd[28153]: conn=11826 op=2 SRCH > base="ou=people,dc=freelancer,dc=lab,dc=zimbra,dc=com" scope=2 deref=0 > filter="(uid=testus*)" > > at stats level logging. Perhaps this is a shell issue, since you're > running this from the command line, and haven't quoted the query? OK, this snipped shows just the last attribute 'mobile', access has been granted to all other attributs as well. ,----[ slapd.log ] | [3052]: => acl_get: [4] attr mobile | [3052]: => slap_access_allowed: result not in cache (mobile) | [3052]: => acl_mask: access to entry "cn=Rosemarie Hein,ou=adressbuch,o=avci,c=de", attr "mobile" requested | [3052]: => acl_mask: to value by "cn=dieter kluenter,ou=partner,o=avci,c=de", (=0) | [3052]: <= check a_dn_pat: cn=admanager,o=avci,c=de | [3052]: <= check a_dn_pat: * | [3052]: <= acl_mask: [2] applying read(=rscxd) (stop) | [3052]: <= acl_mask: [2] mask: read(=rscxd) | [3052]: => slap_access_allowed: read access granted by read(=rscxd) | [3052]: => access_allowed: read access granted by read(=rscxd) | [3052]: conn=28 op=3 SEARCH RESULT tag=101 err=0 nentries=1 text= | [3052]: conn=28 op=4 UNBIND | [3052]: conn=28 fd=18 closed `---- -Dieter -- Dieter Klünter | Systemberatung http://www.dpunkt.de/buecher/2104.html GPG Key ID:8EF7B6C6 53°08'09,95"N 10°08'02,42"E |