Richard Megginson napsal(a):
Radek Hladik wrote:
> Hi,
> is there any way how to log changes to selected attribute only?
No. Both the retro changelog and the audit log contain every change to
every attribute.
> I would need to monitor changes of user password (users claim that
> their password sometimes stops working and I have to reset them). It
> would be enough to audit LDAP modifications on all attributes, I think
> that retro changelog plugin would help, but I do not know how to
> configure it... Is there any documentation for this plugin?
http://www.redhat.com/docs/manuals/dir-server/ag/7.1/replicat.html#1107718
You might also want to investigate the audit log:
http://www.redhat.com/docs/manuals/dir-server/ag/7.1/dsstats.html#1092377
>
I've already enabled both of them and it seems to me that audit log
contains more detailed information. I would need the IP of the user
performing the modification but I think that I will be able to look it
up in the access log.
Radek