Database-based logs exposed via LDAP

摘要

A method and apparatus for maintaining logs for a Lightweight Directory Access Protocol (LDAP) directory server. The method includes receiving or detecting events or activities in the system to be logged. The events are transformed into LDAP entries and stored in an LDAP repository. The LDAP entries may then be searched and operated on using LDAP operations, thereby providing enhanced utility and functionality for log data using LDAP operations and an LDAP repository.

主权项

1. A method comprising:
identifying, by a processing device executing a first lightweight directory access protocol (LDAP) directory server, an event associated with at least one of the first LDAP directory server or a remote second LDAP directory server; analyzing, by the processing device, the event to determine which of a plurality of logs maintained by the first LDAP directory server to update, wherein the plurality of logs comprise at least two of an access log, an error log or an audit log; generating, by the processing device, a log entry for the event in a form of an LDAP entry; and storing the LDAP entry in the determined log in an LDAP repository.