Bug 203256 - net/openldap24-server: Fails to log to SYSLOG unless DEBUG is enabled
Summary: net/openldap24-server: Fails to log to SYSLOG unless DEBUG is enabled
Status: Closed Not Accepted
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Xin LI
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-09-22 00:47 UTC by John Marshall
Modified: 2015-10-14 23:32 UTC (History)
0 users

See Also:
bugzilla: maintainer-feedback? (delphij)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description John Marshall 2015-09-22 00:47:32 UTC
r396801 modified the port to pass --disable-debug to configure unless the port's DEBUG option is set. Previous behaviour was that configure would enable debug by default.

SYSLOG depends on DEBUG, so now slapd will not log to syslog unless the port is build with the DEBUG option selected.

 rwsrv04> grep LDAP_SYSLOG work/openldap-2.4.42/servers/slapd/main.c
 #if defined(LDAP_DEBUG) && defined(LDAP_SYSLOG)
 #endif /* LDAP_DEBUG && LDAP_SYSLOG */
 #if defined(LDAP_DEBUG) && defined(LDAP_SYSLOG)
 #if defined(LDAP_DEBUG) && defined(LDAP_SYSLOG)
 #endif /* LDAP_DEBUG && LDAP_SYSLOG */
 #if defined(LDAP_DEBUG) && defined(LDAP_SYSLOG)
 #endif /* LDAP_DEBUG && LDAP_SYSLOG */

Perhaps this outcome is intentional? I would have thought most admin's would want slapd logging at all times. I am logging this bug just in case this was not an intentional side-effect of r396801.
Comment 1 Xin LI freebsd_committer freebsd_triage 2015-10-14 23:32:35 UTC
(In reply to John Marshall from comment #0)
Disclaimer -- It's not me don't consider this a problem but I didn't find something like "third party to resolve" and the "Rejected" seems to be the closest reason for closing.

I'd suggest bringing this up to openldap-technical@openldap.org and we can discuss there.

In my _personal_ opinion, this new behavior is desirable as production servers should not log queries in this detail (it's like a database server, you only want to log detailed query information when debugging it) at all.

However, I understand that opinion itself may be controversial, because the decision is made at build time, and there may be some system administrators who do not want to debug the server but find the logged information useful (I don't personally, because the directory service is not facing the Internet, and those who bind the server have already logged their login/authentication activities).

Since I didn't write the OpenLDAP code myself, I think it's better that we ask the upstream maintainers for their opinion, and the port will follow the upstream decision on this one.

Hope this helps and thanks for noticing this.