Bug 1338872
| Summary: | Wrong result code display in audit-failure log | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Kamlesh <kchaudha> |
| Component: | 389-ds-base | Assignee: | Noriko Hosoi <nhosoi> |
| Status: | CLOSED ERRATA | QA Contact: | Viktor Ashirov <vashirov> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 7.3 | CC: | kbanerje, nkinder, rmeggins |
| Target Milestone: | pre-dev-freeze | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | 389-ds-base-1.3.5.7-1.el7 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-11-03 20:42:10 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Kamlesh
2016-05-23 14:29:19 UTC
Upstream ticket: https://fedorahosted.org/389/ticket/48892 Bug Verified Steps performs [root@test /]# rpm -qa | grep 389-ds 389-ds-base-1.3.5.8-1.el7.x86_64 Step 1) Enable the Audit and Audit Failure log. Fail log update in Audit log file [root@test yum.repos.d]# ldapmodify -D "cn=Directory Manager" -h localhost -p 389 -w test1234 << EOF > dn: cn=config > changetype: modify > replace: nsslapd-auditlog-logging-enabled > nsslapd-auditlog-logging-enabled: on > - > replace: nsslapd-auditfaillog-logging-enabled > nsslapd-auditfaillog-logging-enabled: on > EOF Step 2) Add Entry which give no such object error [root@test yum.repos.d]# ldapmodify -D "cn=Directory Manager" -w test1234 -p 389 -h test.example.com << EOF > dn: uid=test,ou=People,dc=example,dc=com > changetype:modify > replace:sn > sn: test > EOF modifying entry "uid=test,ou=People,dc=example,dc=com" ldap_modify: No such object (32) matched DN: ou=People,dc=example,dc=com Log entry in the : /var/log/dirsrv/slapd-test/audit time: 20160627181142 dn: uid=test,ou=People,dc=example,dc=com result: 32 changetype: modify replace: sn sn: test - replace: modifiersname modifiersname: cn=directory manager - replace: modifytimestamp modifytimestamp: 20160627124142Z - Step 3) enable the Audit failure log parameters [root@test yum.repos.d]# ldapmodify -D "cn=Directory Manager" -h localhost -p 389 -w test1234 << EOF > dn: cn=config > changetype: modify > add: nsslapd-auditfaillog > nsslapd-auditfaillog: /var/log/dirsrv/slapd-test/audit-failure > - > add: nsslapd-auditfaillog-mode > nsslapd-auditfaillog-mode: 600 > - > add: nsslapd-auditfaillog-maxlogsize > nsslapd-auditfaillog-maxlogsize: 1 > - > add: nsslapd-auditfaillog-logrotationtime > nsslapd-auditfaillog-logrotationtime: 1 > - > add: nsslapd-auditfaillog-logrotationtimeunit > nsslapd-auditfaillog-logrotationtimeunit: Day > - > add: nsslapd-auditfaillog-maxlogsperdir > nsslapd-auditfaillog-maxlogsperdir: 10 > EOF Step 4) Add Entry which give no such object error [root@test yum.repos.d]# ldapmodify -D "cn=Directory Manager" -w test1234 -p 389 -h test.example.com << EOF > dn: uid=test,ou=People,dc=example,dc=com > changetype:modify > replace:sn > sn: test > EOF Result : modifying entry "uid=test,ou=People,dc=example,dc=com" ldap_modify: No such object (32) matched DN: ou=People,dc=example,dc=com Log entry in the : /var/log/dirsrv/slapd-test/audit-failure time: 20160627180025 dn: uid=test,ou=People,dc=example,dc=com result: 32 changetype: modify replace: sn sn: test - replace: modifiersname modifiersname: cn=directory manager - replace: modifytimestamp modifytimestamp: 20160627123025Z Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2016-2594.html |