Product/Component Concerned : eDirectory / LDAP

Target Audience : Beginners

Platform : All (Demonstrated on Linux)

Using (N)DSTRACE is one of the usual debugging techniques in eDirectory. And you have a lot of options that can be used to get the debug trace messages. One of the options is LDAP that can be used to log the messages specific to any ldap operation.

By default, the LDAP option will log on only the error (critical and non-critical) messages. This article will help you to get the more debugging LDAP messages in the ndstrace by setting the LDAP screen options.

Through iManager:

1. Log in to your tree with iManager.\
2. Go to the Directory Administration Tab.
   
   Click to view.
   
   
3. Select the LDAP Server object concerned with your server.
   
   Click to view.
   
   

   
   Click to view.
   
   

   
   Click to view.
   
   
4. Go to the 'Tracing' tab.
   
   And now you can see the 'Error Messages'(critical and non-critical) being selected by default.
   
   Click to view.
   
   
5. Log in to your eDirectory server. Start NDSTRACE and enable the LDAP option.
   
   Click to view.
   
   
6. Run a simple ldapsearch and see no messages been logged in to your NDSTRACE screen, as there are no errors in the ldapsearch.
   
   Click to view.
   
   
7. Go back to the iManager 'LDAP Server' page and enable all the LDAP screen option and click 'Apply'.
   
   Click to view.
   
   
8. We are now done with setting the LDAP screen options. We can now run the same ldapsearch query again against the eDirectory server.
   
   Click to view.
   
   
9. Now we can see more details on the search being logged in to the NDSTRACE including the search parameters, search result etc.
   
   Click to view.

Through ldapconfig utility:

Setting the LDAP screen options can be done through the 'ldapconfig' utility (that gets installed with eDirectory) as follows:

1. Run 'ldapconfig' to get the options.
   
   Click to view.
   
   
2. Run 'ldapconfig get' with the following parameters to get all the options that can be set through ldapconfig.
   
   Click to view.
   
   
3. Use 'ldapconfig get 'LDAP Screen Level'' to get the LDAP Screen Level option alone. And by default it shows only 'Error | Critical'.
   
   Click to view.
   
   
4. The option can be changed to set the screen level option to ALL using the 'ldapconfig set 'LDAP Screen Level=all'' as follows.
   
   Click to view.
   
   
5. Run 'ldapconfig get' to see if the option LDAP Screen Level has been set to ALL.
   
   Click to view.