audit on failure doesn't work if attribute nsslapd-auditlog-logging-enabled is NOT enabled

[389-ds-bot]

Cloned from Pagure issue: https://pagure.io/389-ds-base/issue/48958

• Created at 2016-08-19 06:49:47 by nhosoi (@nhosoi)
• Closed as Fixed
• Assigned to nobody
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1366828

---

Description of problem:
For audit on failure to work correctly, both nsslapd-auditlog-logging-enabled
and nsslapd-auditfaillog-logging-enabled need to be set to "on"

How reproducible:
Always

Steps to Reproduce:
1. Set nsslapd-auditfaillog-logging-enabled from off to on
2. Check if 'audit-failure' file is created in the
/var/log/dirsrv/slapd-INSTANCE/ directory

Actual results:
Even if nsslapd-auditfaillog-logging-enabled is set to 'on',
/var/log/dirsrv/slapd-INSTANCE/audit-failure file is NOT being created.

Expected results:
As soon as nsslapd-auditfaillog-logging-enabled is set to 'on',
/var/log/dirsrv/slapd-INSTANCE/audit-failure file should get created.

Additional info:
Assuming that nsslapd-auditfaillog-logging-enabled is set to 'on', set
nsslapd-auditlog-logging-enabled to 'on' and check if
/var/log/dirsrv/slapd-INSTANCE/audit-failure file is created.

[389-ds-bot]

Comment from firstyear (@Firstyear) at 2016-08-19 08:51:14

attachment
0001-Ticket-48958-Audit-fail-log-doesn-t-work-if-audit-lo.patch

[389-ds-bot]

Comment from firstyear (@Firstyear) at 2016-08-19 09:04:05

commit 5fed802
Writing objects: 100% (8/8), 1.59 KiB | 0 bytes/s, done.
Total 8 (delta 6), reused 0 (delta 0)
To ssh://git.fedorahosted.org/git/389/ds.git
3cce9f9..5fed802 master -> master

[389-ds-bot]

Comment from firstyear (@Firstyear) at 2017-02-11 23:02:17

Metadata Update from @Firstyear:

• Issue set to the milestone: 1.3.5.13