SLAPO-ACCESSLOG(5) File Formats Manual SLAPO-ACCESSLOG(5) (NAME) slapo-accesslog - (Access Logging) slapd (SYNOPSIS) /etc/openldap/slapd.conf (DESCRIPTION) (overlay) (Access Logging) . LDAP . . (audit schema - ) LDIF . (CONFIGURATION) slapd.conf Access Logging . overlay . logdb (suffix) . slapd-mdb(5). . . . logops . : abandon add bind compare delete extended modify modrdn search unbind. (alias) : writes add, delete, modify, modrdn reads compare, search session abandon, bind, unbind all logbase . logops '|' . logold (Deleted) (Modified) . . logoldattr ... (attributes) Modify ModRDN logold . ModRDN . logpurge . age interval . [ddd+]hh:mm[:ss] . . : logpurge 2+00:00 1+00:00 . generalizedTime (eq) reqStart . logsuccess TRUE | FALSE TRUE 0 (LDAP_SUCCESS) . FALSE . FALSE . (EXAMPLES) database mdb suffix dc=example,dc=com ... overlay accesslog logdb cn=log logops writes reads logbase search|compare ou=testing,dc=example,dc=com logold (objectclass=person) database mdb suffix cn=log ... index reqStart eq access to * by dn.base="cn=admin,dc=example,dc=com" read (SCHEMA) accesslog <> . accesslog . . . (object class) . accesslog auditContainer : ( 1.3.6.1.4.1.4203.666.11.5.2.0 NAME 'auditContainer' DESC 'AuditLog container' SUP top STRUCTURAL MAY ( cn $ reqStart $ reqEnd ) ) auditObject auditReadObject auditWriteObject . LDAP . . auditObject : ( 1.3.6.1.4.1.4203.666.11.5.2.1 NAME 'auditObject' DESC 'OpenLDAP request auditing' SUP top STRUCTURAL MUST ( reqStart $ reqType $ reqSession ) MAY ( reqDN $ reqAuthzID $ reqControls $ reqRespControls $ reqEnd $ reqResult $ reqMessage $ reqReferral $ reqEntryUUID ) ) OID (Experimental) OpenLDAP . . : reqStart reqEnd . generalizedTime . reqStart RDN . reqType add delete search . (extended) OID extended(1.1.1.1) reqSession (session) LDAP . slapd . reqDN (distinguishedName) . Bind DN Bind . Add DN . Search DN . reqAuthzID . Bind ( ) . reqControls reqRespControls . (octet strings) . reqResult LDAP LDAP . reqMessage . reqReferral (referrals) . reqEntryUUID entryUUID Add entryUUID . : ( 1.3.6.1.4.1.4203.666.11.5.2.4 NAME 'auditAbandon' DESC 'Abandon operation' SUP auditObject STRUCTURAL MUST reqId ) Abandon reqId (message ID) (abandon) . ( 1.3.6.1.4.1.4203.666.11.5.2.5 NAME 'auditAdd' DESC 'Add operation' SUP auditWriteObject STRUCTURAL MUST reqMod ) Add auditWriteObject . Add Modify . reqMod . ( Modify .) : attribute:<+|-|=|#> [ value] '+' (Add) '-' (Delete) '=' (Replace) '#' (Increment) . Add reqMod '+' . ( 1.3.6.1.4.1.4203.666.11.5.2.6 NAME 'auditBind' DESC 'Bind operation' SUP auditObject STRUCTURAL MUST ( reqVersion $ reqMethod ) ) Bind reqVersion LDAP Bind reqMethod Bind . SIMPLE LDAP Simple Bind SASL() SASL Bind . (global overlay) Simple Bind DN . ( 1.3.6.1.4.1.4203.666.11.5.2.7 NAME 'auditCompare' DESC 'Compare operation' SUP auditObject STRUCTURAL MUST reqAssertion ) Compare reqAssertion (Attribute Value Assertion) . ( 1.3.6.1.4.1.4203.666.11.5.2.8 NAME 'auditDelete' DESC 'Delete operation' SUP auditWriteObject STRUCTURAL MAY reqOld ) Delete . reqOld . : attribute: value reqOld logold . ( 1.3.6.1.4.1.4203.666.11.5.2.9 NAME 'auditModify' DESC 'Modify operation' SUP auditWriteObject STRUCTURAL MAY ( reqOld $ reqMod ) ) Modify reqMod Add . reqOld Delete . reqOld logold . ( 1.3.6.1.4.1.4203.666.11.5.2.10 NAME 'auditModRDN' DESC 'ModRDN operation' SUP auditWriteObject STRUCTURAL MUST ( reqNewRDN $ reqDeleteOldRDN ) MAY ( reqNewSuperior $ reqMod $ reqOld ) ) ModRDN reqNewRDN RDN . reqDeleteOldRDN RDN TRUE RDN FALSE . reqNewSuperior DN . reqOld logold logoldattr . ( 1.3.6.1.4.1.4203.666.11.5.2.11 NAME 'auditSearch' DESC 'Search operation' SUP auditReadObject STRUCTURAL MUST ( reqScope $ reqDerefAliases $ reqAttrsOnly ) MAY ( reqFilter $ reqAttr $ reqEntries $ reqSizeLimit $ reqTimeLimit ) ) Search reqScope (scope) LDAP URL base one sub subord. reqDerefAliases never finding searching always (aliases) . reqAttrsOnly TRUE FALSE . reqFilter . reqAttr . reqEntries . reqSizeLimit reqTimeLimit . ( 1.3.6.1.4.1.4203.666.11.5.2.12 NAME 'auditExtended' DESC 'Extended operation' SUP auditObject STRUCTURAL MAY reqData ) Extended LDAP (Extended Operation) . OID reqType . reqData (octet string) . (NOTES) (ChangeLog) (replication) . (FILES) /etc/openldap/slapd.conf slapd (SEE ALSO) slapd.conf(5) slapd-config(5). (ACKNOWLEDGEMENTS) Howard Chu Symas Corporation . OpenLDAP 2.6.13 2026/03/09 SLAPO-ACCESSLOG(5)