[389-users] "Researching" ldif changes

[Rich Megginson]

Gerrard Geldenhuis wrote:
> Hi
> I was hoping someone can share a methodology of finding the ldif changes that happens when doing changes in the GUI. I would like to create equivalent ldif files for all changes that I do in the GUI. Thus far I have been doing before and after diffs of dse.ldif. I have not done that yet for netscaperoot. Is there any logic with regards to which settings gets stored in which database.
>
> As an example I have used this page:
> http://directory.fedoraproject.org/wiki/Howto:SSL#Verify_SSL_is_enabled
> to assist with ldif'ing ssl settings but what bothers me is that a comparison between dse.ldif with the ldif applied to enable ssl from the howto page and a dse.ldif with ssl enabled via the gui differs significantly. I am not referring to timestamp differences but to additional fields that gets added when enabling SSL via the GUI. Specifically for this example I have not been able to find where "Use SSL in Console" should be set and thus can't include it in my ldif file
>   
"Use SSL in Console" affects entries under o=NetscapeRoot.  See 
http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information
I suggest enabling the audit log.  This will capture all ldap modify 
changes that occur in o=NetscapeRoot and other "regular" databases.
> Best Regards
>
> ________________________________________________________________________
> In order to protect our email recipients, Betfair Group use SkyScan from 
> MessageLabs to scan all Incoming and Outgoing mail for viruses.
>
> ________________________________________________________________________
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>