Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to log authentication failure on OpenLDAP. What is the proper log level bit for that? Or is there another configuration for such a thing?

share|improve this question
up vote 3 down vote accepted

Authentication failure is logged with err=49 - Invalid Credential at default loglevel 256 - (0x100 stats) stats log connections/operations/results:

$ grep 'err=49' -B1 /path/to/ldap.log
slapd[28269]: conn=83767 op=2 BIND dn="cn=x,ou=y,dc=z,dc=t" method=128
slapd[28269]: conn=83767 op=2 RESULT tag=97 err=49 text= 
share|improve this answer

I'm not sure offhand which bit toggles this (or if it's discretely logged).
If I had to hazard a guess I would say probably 128 (ACL processing) or 256 (Stats - Connections/Operations/Results)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.