From 324cf9f38f57108eda0965dfe9415f39ecf63a26 Mon Sep 17 00:00:00 2001
From: William Brown <firstyear@redhat.com>
Date: Dec 08 2015 01:42:00 +0000
Subject: Ticket 48280 - enable logging of internal ops in the audit log


Bug Description:  many plugins add and modify entries, but these changes are not
visible in the audit log. It can be very useful to have these changes available.

Fix Description:  This feature actually already existed:

nsslapd-logAccess
nsslapd-logAudit

On a plugin, will turn on the respective logs.

This change brings the audit log in line with access to respect the value of

nsslapd-plugin-logging

Such that when plugin-logging is enabled globally in cn=config, plugins will
log based on the values in:

nsslapd-accesslog-logging-enabled
nsslapd-auditlog-logging-enabled
nsslapd-auditfaillog-logging-enabled

https://fedorahosted.org/389/ticket/48280

Author: wibrown

Review by: ???

---

diff --git a/ldap/servers/slapd/plugin.c b/ldap/servers/slapd/plugin.c
index 0e99095..4ab644b 100644
--- a/ldap/servers/slapd/plugin.c
+++ b/ldap/servers/slapd/plugin.c
@@ -3808,7 +3808,7 @@ int plugin_build_operation_action_bitmap (int input_actions, const struct slapdp
 	if (plugin->plg_conf.plgc_log_access || config_get_plugin_logging())
 		result_actions |= OP_FLAG_ACTION_LOG_ACCESS;
 
-	if (plugin->plg_conf.plgc_log_audit)
+	if (plugin->plg_conf.plgc_log_audit || config_get_plugin_logging())
 		result_actions |= OP_FLAG_ACTION_LOG_AUDIT;
 
 	/*