Counting LDAP Searches and Binds

Novell Cool Solutions: Tip
By Akos Szechy

Digg This - Slashdot This Posted: 30 May 2007

Problem

A Forum reader recently asked:

"Is it possible to count LDAP searches or binds with eDirectory (not by ndstrace and then analyzing the Log file). Perhaps there's a special property in the LDAP server object?"

And here's the response from Akos Szechy ...

Solution

You can get the counters from the RootDSE object. Run this:

ldapsearch -h ip -p 389 -x -s base objectclass=*

Then, look for these:

• wholeSubtreeSearchOps
• oneLevelSearchOps
• searchOps
• strongAuthBinds
• simpleAuthBinds
• unAuthBinds

Reader Comments

• What period of time is this stat for? When do the values roll? More information would be good.
• Reply: The statistics are always cleared when the LDAP Server (or LDAP module on the server) is restarted. These stats are available on the RootDSE object which we are asking in this particular case. Cheers, Akos

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com