Configuring Directory Proxy Server Logs

Directory Proxy Server access, bind, connection, and error logs can be configured by using the dpconf command or DSCC. For information about how to configure the logs by using DSCC, see the Directory Proxy Server online help. This section describes how to configure Directory Proxy Server logs by using the dpconf command.

You can retrieve a complete list of the configuration options along with the allowed values and default values by running these commands:

$ dpconf help-properties error-log
$ dpconf help-properties access-log
$ dpconf help-properties bind-log
$ dpconf help-properties connection-log

To Configure Directory Proxy Server Logs

The example in this procedure configures the Directory Proxy Server access log. You can use the same procedure to configure the Directory Proxy Server bind, connection, or error log. Be sure to replace access with bind, connection or error depending upon the log you are configuring.

You can use DSCC to perform this task. For information, see Directory Service Control Center Interface and the DSCC online help.

1. View the properties of the access log.

   $ dpconf get-access-log-prop -h host -p port

   The default properties of an access log are as follows:

   default-log-level                :  info
   enable-log-rotation              :  true
   log-buffer-size                  :  1M
   log-file-compression             :  no-compression
   log-file-name                    :  logs/access
   log-file-perm                    :  600
   log-level-client-connections     :  inherited
   log-level-client-disconnections  :  inherited
   log-level-client-operations      :  inherited
   log-level-connection-handlers    :  inherited
   log-level-data-sources           :  inherited
   log-level-data-sources-detailed  :  none
   log-min-size                     :  100M
   log-rotation-frequency           :  1h
   log-rotation-policy              :  size
   log-rotation-size                :  100M
   log-rotation-start-day           :  -
   log-rotation-start-time          :  -
   log-search-filters               :  false
   max-age                          :  unlimited
   max-log-files                    :  10
   max-size                         :  unlimited
   min-free-disk-space-size         :  10

2. Change one or more of the properties that are listed in Step 1.

   $ dpconf set-access-log-prop -h host -p port property:value \
    [property:value ...]

   For example, to set the default log level for all message categories to all, set the value of the default-log-level property to all.

   $ dpconf set-access-log-prop -h host1 -p 1389 default-log-level:all

   To disable all logs, irrespective of the log level for each message category, set the value of the default-log-level property to none.

   $ dpconf set-access-log-prop -h host1 -p 1389 default-log-level:none

   To reset a specific log level to the default log level, set that log level property to inherited. For example, to reset the log level for client connections, run the following command:

   $ dpconf set-access-log-prop -h host1 -p 1389 log-level-client-connections:inherited

   For information about properties that can be set by the set-access-log-prop subcommand, type:

   $ dpconf help-properties access-log

To Configure Directory Proxy Server Access Log etimes Units

Directory Proxy Server can log the etimes in seconds, milliseconds or microseconds. If the server property log-etimes-in-seconds is set to true, the etimes will be logged in seconds with a decimal part. The precision of the decimal part will be determined by the value of the time-resolution property. If log-etimes-in-seconds is set to false (the default), then the etimes will be integer numbers expressing milliseconds or microseconds, depending on the value of the time-resolution property.