#356 logconv.pl - RFE - track bind info
Closed: Fixed None Opened 8 years ago by mreynolds.

A request has been made to find all the IP addresses that issue anonymous binds, but the feature should be able to track other bind DN's as well.

Track:

IP
Bind method
result codes
...
...


Added new option "-B,--bind", which takes one of three arguments: ALL, ANONYMOUS, actual bind DN ("uid=mark,dc=mark").

The output looks like:

Bind DN: uid=scarter,ou=people,dc=example,dc=com

Client Addresses:

    [1]  145.72.68.53
    [2]  145.72.68.52

Operations Performed:

    Binds:      14974
    Searches:   15025
    Modifies:   0
    Adds:       0
    Deletes:    0
    Compares:   0
    ModRDNs:    0
    Ext Ops:    0

Bind DN: Anonymous

Client Addresses:

    [1]  145.72.68.54
    [2]  145.72.30.22
    [3]  145.72.178.66

Operations Performed:

    Binds:      385  (Invalid Credentials: 2)
    Searches:   746
    Modifies:   0
    Adds:       0
    Deletes:    0
    Compares:   0
    ModRDNs:    0
    Ext Ops:    0

sending out for review...

Very nice!

I could be wrong, but I think you extended the tool to cover the IPv6 addresses, didn't you? How does it work?

I did extend the script to support IPv6! I guess I should of commented on that.

Not sure what you are asking. How does what work?

In the meantime, pushing fix:

[mareynol@localhost servers]$ git merge ticket356
Updating 16e9242..9918105
Fast-forward
ldap/admin/src/logconv.pl | 263 +++++++++++++++++++++++++++++++++++++++++++--
1 files changed, 252 insertions(+), 11 deletions(-)

[mareynol@localhost servers]$ git push origin master
Counting objects: 11, done.
Delta compression using up to 4 threads.
Compressing objects: 100% (5/5), done.
Writing objects: 100% (6/6), 2.68 KiB, done.
Total 6 (delta 4), reused 0 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
16e9242..9918105 master -> master

Cool!
Oh, I just wanted to see the IPv6 addresses here... :)

Client Addresses:

    [1] 145.72.68.54
    [2] 145.72.30.22
    [3] 145.72.178.66

It would of looked like:

Client Addresses:

    [1] 2000:db8:0:f101::11
    [2] fe80::250:45ff:fe02:7fe8

Added initial screened field value.

To ssh://git.fedorahosted.org/git/389/ds.git
fbece32..313dd8e 389-ds-base-1.2.11 -> 389-ds-base-1.2.11
commit 4ce70fe
Author: Mark Reynolds mareynol@redhat.com
Date: Wed May 9 12:17:57 2012 -0400

Metadata Update from @mreynolds:
- Issue assigned to mreynolds
- Issue set to the milestone: 1.3.0.a1

3 years ago

Login to comment on this ticket.

Metadata