From 4934a7ab00f468cb732b35853b00d167eae8de04 Mon Sep 17 00:00:00 2001 From: Howard Chu Date: Wed, 3 May 2006 21:38:15 +0000 Subject: [PATCH] Apply logoldattr / reqOld to ModRDN --- doc/man/man5/slapo-accesslog.5 | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/doc/man/man5/slapo-accesslog.5 b/doc/man/man5/slapo-accesslog.5 index 31a78142a7..c27e483470 100644 --- a/doc/man/man5/slapo-accesslog.5 +++ b/doc/man/man5/slapo-accesslog.5 @@ -56,8 +56,9 @@ logged along with the current request. .TP .B logoldattr ... Specify a list of attributes whose old contents are always logged in -a Modify request. Usually only the contents of attributes that were -actually modified will be logged. +Modify and ModRDN requests. Usually only the contents of attributes that were +actually modified will be logged; by default no old attributes are logged +for ModRDN requests. .TP .B logpurge Specify the maximum age for log entries to be retained in the database, @@ -114,7 +115,7 @@ overlay utilizes the "audit" schema described herein. This schema is specifically designed for .B accesslog auditing and is not intended to be used otherwise. It is also -noted that the schema describe here is +noted that the schema described here is .I a work in .IR progress , and hence subject to change without notice. @@ -359,7 +360,7 @@ filter. DESC 'ModRDN operation' SUP auditWriteObject STRUCTURAL MUST ( reqNewRDN $ reqDeleteOldRDN ) - MAY reqNewSuperior ) + MAY ( reqNewSuperior $ reqOld ) ) .RE .P The @@ -378,6 +379,14 @@ The .B reqNewSuperior attribute carries the DN of the new parent entry if the request specified the new parent. +The +.B reqOld +attribute is only populated if the entry being modified matches the +configured +.B logold +filter and contains attributes in the +.B logoldattr +list. .LP .RS 4 -- 2.39.5