-
Type: Task
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
Fully Compatible
-
Security 2023-09-04, Security 2023-09-18, Security 2023-10-02
Today, there are a few issues that make it challenging to debug OpenLDAP-specific issues. Making the following logging-related adjustments will help isolate the root cause of LDAP failures.
- Reduce the verbosity of MongoDB logs issued within the OpenLDAPConnection class to 1. This is lower than the verbosity of most connection pool logs (2+) and thus can be used to filter logs better.
- Investigate setting LDAP_OPT_DEBUG_LEVEL to a higher level (it is currently not being set). This may elicit better diagnostic messages when libldap encounters errors.
- Produce a new startup warning log when running RHEL 7 informing customers that OpenLDAP may not properly enforce timeouts when chasing referrals.