}
policy {
- linelogprep {
- &control.Tmp-String-0 := "%{Packet-Type} %{LDAP-Sync.DN} %{LDAP-Sync.Entry-DN} %{Proto.radius.User-Name} %{Tmp-Integer-0} %{Tmp-String-0}"
- }
-
$INCLUDE ${maindir}/policy.d/
}
modules {
linelog {
- format = "%{control.Tmp-String-0}"
+ format = "%{Packet-Type} %{LDAP-Sync.DN} %{LDAP-Sync.Entry-DN} %{Proto.radius.User-Name} %{SMB-Account-CTRL} %{User-Category}"
destination = file
file {
update {
&Proto.radius.User-Name = 'sAMAccountName'
- &Tmp-Integer-0 = 'userAccountControl'
+ &SMB-Account-CTRL = 'userAccountControl'
}
# trigger {
update {
&Proto.radius.User-Name = 'sAMAccountName'
- &Tmp-Integer-0 = 'userAccountControl'
- &Tmp-String-0 = 'isDeleted'
+ &SMB-Account-CTRL = 'userAccountControl'
+ &User-Category = 'isDeleted'
}
}
}
}
recv Add {
- linelogprep
linelog
}
recv Modify {
- linelogprep
linelog
}
# The DN changes for each deleted object - normalise the variable bit
# so we can check the output
#
- if (&LDAP-Sync[0].Entry-DN =~ /(CN=.+:)[a-f0-9-]+(,CN=Deleted Objects,DC=example,DC=com)/) {
- &request.LDAP-Sync[0].Entry-DN := "%{1}oldid%{2}"
+ if (&LDAP-Sync.Entry-DN =~ /(CN=.+:)[a-f0-9-]+(,CN=Deleted Objects,DC=example,DC=com)/) {
+ &request.LDAP-Sync.Entry-DN := "%{1}oldid%{2}"
}
- linelogprep
linelog
}
policy {
linelogprep {
- &request.Tmp-String-8 := &LDAP-Sync.DN
- if (&Tmp-String-8 == "ou=people,dc=example,dc=com") {
- &control.Tmp-String-9 := "people"
+ if (&LDAP-Sync.DN == 'ou=people,dc=example,dc=com') {
+ &control.LDAP-Sync.DN := 'people'
} else {
- &control.Tmp-String-9 := "group"
+ &control.LDAP-Sync.DN := 'group'
}
- &control.Tmp-String-0 := "%{Packet-Type} %{LDAP-Sync.DN} %{LDAP-Sync.Entry-DN} %{LDAP-Sync.Original-DN} %{Proto.radius.User-Name}"
+ &Linelog-Entry := "%{Packet-Type} %{LDAP-Sync.DN} %{LDAP-Sync.Entry-DN} %{LDAP-Sync.Original-DN} %{Proto.radius.User-Name}"
}
grouplog {
- foreach &Tmp-String-1 {
- &control.Tmp-String-0 := "Group member %{Foreach-Variable-0}"
+ foreach &Stripped-User-Name {
+ &Linelog-Entry := "Group member %{Foreach-Variable-0}"
linelog
}
}
modules {
linelog {
- format = "%{control.Tmp-String-0}"
+ format = &Linelog-Entry
destination = file
file {
- filename = ${run_dir}/%{control.Tmp-String-9}%{Packet-Type}%{Proto.radius.User-Name}%{Tmp-String-2}.out
+ filename = ${run_dir}/%{control.LDAP-Sync.DN}%{Packet-Type}%{Proto.radius.User-Name}%{User-Category}.out
}
}
server test {
namespace = ldap_sync
+ dictionary {
+ string Linelog-Entry
+ }
+
listen {
transport = ldap
scope = "sub"
update {
- &Tmp-String-1 += "member"
- &Tmp-String-2 = 'cn'
+ &Stripped-User-Name += "member"
+ &User-Category = 'cn'
}
}
}
policy {
linelogprep {
- &request.Tmp-String-8 := &LDAP-Sync.DN
- if (&Tmp-String-8 == "ou=people,dc=example,dc=com") {
- &control.Tmp-String-9 := "people"
+ if (&LDAP-Sync.DN == 'ou=people,dc=example,dc=com') {
+ &control.LDAP-Sync.DN := 'people'
} else {
- &control.Tmp-String-9 := "group"
+ &control.LDAP-Sync.DN := 'group'
}
- &control.Tmp-String-0 := "%{Packet-Type} %{LDAP-Sync.DN} %{LDAP-Sync.Entry-DN} %{Proto.radius.User-Name}"
+ &Linelog-Entry := "%{Packet-Type} %{LDAP-Sync.DN} %{LDAP-Sync.Entry-DN} %{Proto.radius.User-Name}"
}
grouplog {
- foreach &Tmp-String-1 {
- &control.Tmp-String-0 := "Group member %{Foreach-Variable-0}"
+ foreach &Stripped-User-Name {
+ &Linelog-Entry := "Group member %{Foreach-Variable-0}"
linelog
}
}
}
linelog {
- format = "%{control.Tmp-String-0}"
+ format = &Linelog-Entry
destination = file
file {
- filename = ${run_dir}/%{control.Tmp-String-9}%{Packet-Type}%{Proto.radius.User-Name}%{Tmp-String-2}.out
+ filename = ${run_dir}/%{control.LDAP-Sync.DN}%{Packet-Type}%{Proto.radius.User-Name}%{User-Category}.out
}
}
linelog cookielog {
- format = "Cookie = %{control.Tmp-String-0}"
+ format = "Cookie = %{Linelog-Entry}"
destination = file
file {
server test {
namespace = ldap_sync
+ dictionary {
+ string Linelog-Entry
+ }
+
listen {
transport = ldap
cookie_changes = 2
scope = "sub"
update {
- &Tmp-String-1 += "member"
- &Tmp-String-2 = 'cn'
+ &Stripped-User-Name += "member"
+ &User-Category = 'cn'
}
}
}
}
store Cookie {
- &control.Tmp-String-0 := &LDAP-Sync.Cookie
+ &Linelog-Entry := &LDAP-Sync.Cookie
cookielog
}