CVE-2021-3670 ldap_server: Clearly log LDAP queries and timeouts
authorAndrew Bartlett <abartlet@samba.org>
Thu, 18 Nov 2021 03:09:47 +0000 (16:09 +1300)
committerDouglas Bagnall <dbagnall@samba.org>
Thu, 25 Nov 2021 02:30:42 +0000 (02:30 +0000)
commit3507e96b3dcf0c0b8eff7b2c08ffccaf0812a393
tree0082326511104cdba34d2aadb3f11004bb1b7db2
parent5f0590362c5c0c5ee20503a67467f9be2d50e73b
CVE-2021-3670 ldap_server: Clearly log LDAP queries and timeouts

This puts all the detail on one line so it can be searched
by IP address and connecting SID.

This relies on the anr handling as otherwise this log
becomes the expanded query, not the original one.

RN: Provide clear logs of the LDAP search and who made it, including
a warning (at log level 3) for queries that are 1/4 of the hard timeout.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14694

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Autobuild-User(master): Douglas Bagnall <dbagnall@samba.org>
Autobuild-Date(master): Thu Nov 25 02:30:42 UTC 2021 on sn-devel-184
source4/ldap_server/ldap_backend.c