Reg. notes=F seen in access logs of DS 5.2

Hi,
I see the following strange "notes=F" in my DS 5.2 access logs.
I know that "notes=U " refer to Unindexed searches.
But I am seeing "notes=F" for the first time and could not get any relevant documentation from Sun's site on this.
I have attached the log snippet below for reference.
Can anyone help me on understanding this?
conn=3877467 op=57 msgId=2135344 - RESULT err=0 tag=101 nentries=52 etime=1 notes=F
conn=3877635 op=17 msgId=2135387 - RESULT err=0 tag=101 nentries=1 etime=0 notes=F
Thanks ,
Benjamin Joseph

Thanks Wajih for the info.
You are right. Now I remember sometime ago we introduced nsslapd-search-tune attribute in our configuration.
Benjamin

Similar Messages

  • Username not showing up in access log for authenticated users

    I'm using form-based authentication in a Java web application on Sun One Web Server v6.1 to restrict access to authenticated users. However, even after the users authenticate and access the application, the username field in the access log is showing them as anonymous.
    request.getRemoteUser() is reporting the correct username, so it just seems to be the access log that is in error. Right now it is set to the default but changing formats to custom doesn't seem to help in displaying the username.
    Here's an excerpt from the access log:
    // anonymous access attempt, redirects to login page...
    10.100.168.110 - - [01/May/2006:14:34:42 -0400] "GET /profile/index.jsp HTTP/1.1" 302 0
    10.100.168.110 - - [01/May/2006:14:34:42 -0400] "GET /profile/login.jsp HTTP/1.1" 200 3355
    10.100.168.110 - - [01/May/2006:14:34:47 -0400] "POST /profile/j_security_check HTTP/1.1" 302 0
    // at this point they are logged in and their username should be reflected in the access log, but is not:
    10.100.168.110 - - [01/May/2006:14:34:47 -0400] "GET /profile/index.jsp HTTP/1.1" 200 3532 And the relevant code from the web application's web.xml:
    <security-constraint>
        <web-resource-collection>
          <web-resource-name>AllFiles</web-resource-name>
          <description>
                     Restricts anonymous access.
                  </description>
          <url-pattern>/*</url-pattern>
          <http-method>POST</http-method>
          <http-method>GET</http-method>
        </web-resource-collection>
        <auth-constraint>
          <description>
                   Authenticated Users
                  </description>
          <role-name>user</role-name>
        </auth-constraint>
      </security-constraint>I've searched the forums and the manuals but can't see anything showing that the access log's username field doesn't work with form-based authentication. Can anyone shed some light on this?

    Some background:
    The Java Servlet container has its own authentication infrastructure (which is what you configure in web.xml) which is separate from the non-Java authentication infrastructure (ACLs, etc.). If you set up authentication via ACLs the resulting user identity can (though you may configure it not to) propagate to the Java Servlet container such that request.getRemoteUser() will return it, even though no web.xml-driven authentication occurred. The coverse is not true, however: if you authenticate via a Java Realm, based on web.xml configuration, that user identity is not available to non-Java code.
    (Your web.xml snippet doesn't show you using FORM auth - but it doesn't matter, the explanation above applies in any case.)
    That is why the log file (generated from non-Java code) doesn't have access to that user. It probably should, but there's no config option today for you to make that happen.
    If you're using BASIC auth you may consider moving the authentication configuration from web.xml to ACLs as a possible workaround. It will then show up in the access logs.
    If you prefer web.xml-based authentication, consider the <SECURITY audit="true"> option in server.xml. It won't be in the access log but you'll have an audit trail of authentications, which may help.

  • Authenticated User not showing up in access log

    Hello all,
    I am trying to get authenticated users to show up in the access log of SunOne Web Server 6.1 SP4 and it doesn't work. It is a default paramter to show up in the access log but doesn't show in the log. In fact, when I set the log to only show the authenticated user in the log, the log is empty and only shows dashes. As you can in the part of the log file below, after the IP address the log should show the authenticated user but doesn't
    Any help? Do I need to modify something else in a configuration file?
    Thanks
    Richard
    10.64.8.62 - - [15/Jul/2007:00:42:28 +0200] "GET / HTTP/1.1" 200 202
    10.64.8.62 - - [15/Jul/2007:00:43:43 +0200] "GET / HTTP/1.1" 200 202
    10.64.8.62 - - [15/Jul/2007:00:44:58 +0200] "GET / HTTP/1.1" 200 202
    10.64.8.62 - - [15/Jul/2007:00:46:14 +0200] "GET / HTTP/1.1" 200 202
    10.64.8.62 - - [15/Jul/2007:00:47:29 +0200] "GET / HTTP/1.1" 200 202
    10.64.8.62 - - [15/Jul/2007:00:48:44 +0200] "GET / HTTP/1.1" 200 202
    10.64.8.62 - - [15/Jul/2007:00:49:59 +0200] "GET / HTTP/1.1" 200 202
    10.65.1.63 - - [15/Jul/2007:00:51:14 +0200] "GET /Windchill/ HTTP/1.1" 200 402
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/wtcore/js/com/ptc/core/ca/web/misc/content.js HTTP/1.1" 200 4132
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/netmarkets/images/cut.gif HTTP/1.1" 200 104
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/netmarkets/images/newdoc.gif HTTP/1.1" 200 215
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/netmarkets/images/details.gif HTTP/1.1" 200 214
    10.65.1.63 - - [15/Jul/2007:00:51:14 +0200] "GET /Windchill HTTP/1.1" 302 0
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/netmarkets/javascript/util/calendar.js HTTP/1.1" 200 29580
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/netmarkets/images/contract_comp.gif HTTP/1.1" 200 79
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/netmarkets/images/newfoldertl.gif HTTP/1.1" 200 221
    10.65.1.63 - - [15/Jul/2007:00:51:15 +0200] "GET /Windchill/netmarkets/images/ptclogo.gif HTTP/1.1" 200 1284
    10.64.8.62 - - [15/Jul/2007:00:51:14 +0200] "GET / HTTP/1.1" 200 202

    You didn't say how the server is authenticating the user. Is it succesful? ACLs or Java?
    6.1sp4 is obsolete, update to the latest 6.1 service pack first. If you're using Java, I believe there was a bug years ago that was along the lines of your description. Update to the latest 6.1 service pack and if that doesn't solve the problem, provide more details on how the authentication is configured.

  • IPlanet 6.0 Request "Info" in Error, but not Access log

    I am trying to get ARIBA XML messages to pass through my web server (iPlanet 6.0) back to the app tier, when I receive the following messages in the web server "errors" log:
    [27/Aug/2003:15:38:28] info (11953): Loading Simple Session Manager by default. Specify MMapSessionManager in servlets.p
    roperties to load persistent session manager
    [27/Aug/2003:15:38:28] info (11953): SimpleSessionManager: Default values for maximum number of sessions is 1000 with a
    time out value of 1800 seconds
    [27/Aug/2003:15:38:28] info (11953): SimpleSessionManager: Maximum number of sessions (1000) with a time out value of (1
    800) seconds
    Any ideas why the request does not appear in the "access" log file? Must I configure the session manager?

    Hello Folks
    In the obj.conf
    You need to set this one in your context
    I have an example below
    <Object name="test" ppath="*/test/*">
    Service fn="wl_proxy" WebLogicCluster="172.17.10.100:7001,172.17.10.101:7001" KeepAliveEnabled="false" PathTrim="" ErrorPage="/Web/html/error.html"
    </Object>
    Trust this one helps
    Cheers
    Manoj

  • How has access.log file configured in WebLogic server 10.0?

    1.) I am using BEA Weblogic 10.0 and my access.log is not getting updated.
    2.) I also need any information as to how this Webblogic server forms chunks (ex....access00011.log,access00012.log) because i have a software called AWStats which merges all these chunks into 1 single access.log file under its subdirectory.
    3.) I also need information as to how and where the user can specify/ form his own fields which gets displayed in the access.log
    FYI i have 2 servers and i checked under Logging->HTTP->advanced, in both the servers options and configurations are same but in 1 it works fine and access.log is updating but not in the other one.
    Kindly let me know i you have any leads into this issue!
    Thanks,
    Varun

    Hi Ravish,
    Firstly thanks for the reply.
    1.) -----
    What you can do is to set the buffer-size-kb parameter value to "0" in config.xml so that it can start logging once the server starts coming up rather then waiting for the default size which is 8kb to pass.
    Something like below:
    <web-server-log>
    <buffer-size-kb>0</buffer-size-kb>
    <web-server-log>
    For more details check the below link:
    Search for: CR302493
    http://download.oracle.com/docs/cd/E11035_01/wls100/issues/known_resolved.html
    --- for this issue i had browsed throught the forum before posting but in my conf file i have something like this instead of <buffer-size-kb>0</buffer-size-kb>
    <web-server>
    <web-server-log>
    <number-of-files-limited>false</number-of-files-limited>
    <log-file-format>extended</log-file-format>
    </web-server-log>
    </web-server>
    So how do i go about the path of debugging now??
    2.) -------
    If you do not want rotation of access.log then you can just disable it from the below console path just by putting Rotation type as None
    Server -> <YOUR_SERVER_NAME> -> Logging (tab) -> HTTP (sub-tab) -> Rotation type: None
    ---- for this in both my servers i have the settings like this,
    Rotation type--> By Size
    Rotation File size 5000
    Begin rotation time 00:00
    rotation interval 24
    files to retain 7
    and Log file rotation directory is left blank (to get created in same directory)
    and also Rotate log file on startup is unchecked.
    so??? what do you suggest!?
    3.) ------
    I also need information as to how and where the user can specify/ form his own fields which gets displayed in the access.log
    ---- regarding this, in my main server the access.log is getting updated and after 4.8Mb its creating 5Mb chunks. So, for example if the entire log is of 15 Mb then access.log stops updating at 4.98Mb and accesslog.out0001 and accesslog.out0002 is created with 5Mb each but the latest entry will be stored in accesslog.out0002 file. I hope i didn't complicate this :)
    Regards,
    Varun

  • Retrive  User & Cookie Information Using Apache Access Log Files

    Hi All
    The following information are not showing under Apache access log files that is used with Oracle Appserver (10g 10.1.2) given below.
    1)User Informations
    2)Cookie Informations
    We are using below Commands in the httpd.conf File that have specified in the documents link given below
    http://download-west.oracle.com/docs/cd/B31017_01/web.1013/q20201/logs.html#accesslog
    LogFormat "%h %l %u %t \"%r\" %>s %b %v \"%{Referer}i\" \"%{User-Agent}i\" \"%{cookie}n\"" combined
    Please anyone can tell what are the necessary informations that we have to specified in the httpd.conf file to retrive Cookie and user Informations.
    Thanks to all
    Sona

    Thanks for your reply
    Can u please check the below link for the cookie flag information
    http://download-west.oracle.com/docs/cd/B31017_01/web.1013/q20201/mod/mod_usertrack.html
    For your information i have logged in already.
    Our Sample O/p is given below
    151.146.191.186 - - [28/Dec/2006:10:13:05 +0530] "GET /Tab_files/lowerbox.gif HT
    TP/1.1" 200 150 - "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows)"
    We are using the below command format
    LogFormat "%h %l %u %t \"%r\" %>s %b %{cookie}n \"%{Referer}i\" \"%{User-Agent}i\"" combined
    But User and Cookie informations is not displaying.
    what steps should i follow.
    Looking for the favourable reply
    Thanks

  • Getting Error "Apple ID does not have permission to access iTunes Connect" while logging to iTunes. Please help me in this regard

    Getting Error "Apple ID does not have permission to access iTunes Connect" while logging to iTunes. Please help me in this regard
    Regards,
    Amar

    See the "More Like This" section over there ===============>
    In the future, search before posting.

  • I try to log into itunes but get message Apple ID does not have permission to access iTunes Connect.

    I try to log into itunes but get message Apple ID does not have permission to access iTunes Connect.
    What do I need to do to have access to iTunes?

    do you have your apple id set up for publishing books?
    please take a look here:
    https://itunesconnect.apple.com/WebObjects/iTunesConnect.woa/wa/bookSignup

  • WLS http access logs not written to when starting WLS instance using nodemanager

    When starting managed WLS instances using node manager the HTTP access logs are
    not written to (the WLS log in the same directory is written to). All other functionality
    of the WLS instances seem to operate just fine when started using node manager.
    When we start the same managed WLS instances using a start-up script the HTTP
    access logs are written to.
    ===
    How can we get HTTP access logs to be written to when starting a WLS instance
    using node manager?

    I think I know the answer to this one!
    I got bitten by the same bug (at least I think it is a bug). Check the location
    specified for the HTTP-access log for your server instance. It is probably a relative
    location, right?
    According to the docs, relative paths should start from the Root Directory (see
    your Remote Start config), but it seems like the BEA-programmers forgot to retrieve
    the Root Directory and instead blindly writes to the process' current working
    directory (CWD).
    And when started by the Node Managet, the CWD = WL_HOME/common/nodemanager.
    If you are as paronoid as I am (and you should be too), that directory should
    not be writeable by anyone. Because my BEA installation was owned by 'bin', and
    the processes run by 'beawls', I got an error message in my NM-logs pointing to
    the problem. In your case, you are probably running NM as a user that has write-access
    to your NM-home, and all your missing HTTP-access logs are deep, down there.
    Jan Bruun Andersen

  • Weblogic Access Logs not getting generated / updated only for Admin server

    Hi All,
    I have a query ,
    We recently noticed that the weblogic access logs for our admin server are not getting generated.
    However we checked that the access logs are getting generated for the managed servers that we have.
    There is not much difference between the logging settings between the admin and the managed servers.
    We thought that there might be some problem with the buffering and that the data might not be written to the files immediately.
    So after researching we found the parameter "-Dweblogic.logging.bufferSizeKB=0" and added that to the java options however it did not make any difference.
    Also we tried modifying the config script as ,
    <server>
    <web-server>
    <web-server-log>
    <buffer-size-kb>0</buffer-size-kb>
    </web-server-log>
    </web-server>
    </server>
    However no luck .....
    We are using weblogic 9.2 MP3 and think there might be some bug with this version , however its hard to believe that the logs are generated and updated for managed servers and not for the admin servers.
    The only thing we notice in the access logs of the admin server is 404 errors.
    Any suggestions ?
    Regards,
    Stacey.

    This has come up recently here:
    access log not writing to disk in a timely fashion
    I didn't find that buffer-size-kb capability in the docs in 9.2. I recommend checking with support.

  • Reg: weblogic 5.1 access log format

    I'm using weblogic 5.1 with sp 13
    If i dispatch the request from the servlet to jsp it's not logged in the access.log
    and also i need to have the response time also for the particular jsp.
    Is there any way to do the above things.
    Regards
    Hari

    Hi.
    Looks like you're right. Please open a case with support to get these and refer to
    the following bug numbers: CR052727 and CR045962. These are pending issues to update
    the PDF files and restore the links to the PDF files.
    Thanks,
    Michael
    sudarson wrote:
    Hi All,
    Previously weblogic 5.1 docs were available in weblogic site. But now when I tried
    to find those pdfs in the site , I couldn't find out. Instead, now it's available
    in only zipped html form.Can any body pls tell me where can I get those pdfs ?
    Thanks and Regards,
    Sudarson--
    Developer Relations Engineer
    BEA Support

  • I just purchased a new laptop and I am trying to transfer my ITunes library to my new computer. When I log into ITunes on my new laptop and enter my  Apple ID password, it says AppleID does not have permission to access iTunes Connect.  What do I do?

    I just purchased a new laptop and I am trying to transfer my iTunes library to my new laptop and Apple is saying Apple ID does not have permission to access iTunes Connect on my new laptop.  How do I get my library transferred to my new computer? Please help!

    allears2 wrote:
    I just purchased a new laptop and I am trying to transfer my iTunes library to my new laptop...
    To have  EVERYTHING  on your New computer...
    From your OLD computer...
    Copy your ENTIRE iTunes FOLDER to an External Drive... and then from the External Drive to your New Computer..
    Full Details Here  >  http://support.apple.com/kb/HT1751
    An Added Bonus is that you will have a Backup of iTunes.

  • Authenticated user name not written to access log file

    Our users are authenticated with certificates to an LDAP directory server. The Access log file is using the Extended-2 format.
    The name of the authenticated user is now written in the Access log.
    10.4.57.44 - - [19/May/2004:14:07:21 -0400] "GET /somepage HTTP/1.1" 200 10382
    Anybody know why?

    I've got the same problem with Sun Java System Web Proxy Server 4.02 for Linux.
    When I installed it, authenticated users were visible in the access log. Then I tryied to change format and since that moment, this information is disappeared.
    Any news about this bug?
    Thanx.
    G.

  • SCVMM 2008 R2 - "The SQL Server service account does not have permission to access Active Directory Domain Services (AD DS)."

    I know this question has been asked before, but never for R2, that I can tell, and the posted fixes aren't working. I have just installed SCVMM 2008 R2 on a Windows Server 2008 R2 server, using a remote SQL 2008 SP1 database. When I attempt to connect to SCVMM, I get the following error:
    "The SQL Server service account does not have permission to access Active Directory Domain Services (AD DS).
    Ensure that the SQL Server service is running under a domain account or a computer account that has permission to access AD DS. For more information, see "Some applications and APIs require access to authorization information on account objects" in the Microsoft Knowledge Base at http://go.microsoft.com/fwlink/?LinkId=121054.
    ID: 2607"
    What I've seen online is that this is usually becuase the domain account SCVMM is running as does not have the proper permissions on the SQL database. Here's what I've confirmed:
    1) My SCVMM service account is a local admin on the SCVMM server
    2) My SCVMM service account is a dbowner on the SCVMM database in SQL
    3) My SQL service account is a dbowner on the SCVMM database in SQL
    4) My SQL service account is a domain user (even made it a domain admin, just in case, and it still "doesn't have access to AD DS," which is obviously untrue)
    5) Neither service account is locked out
    Has anyone run in to this? It says in Technet that remote SQL 2008 is supported, as long as the SQL management studio is installed to the SCVMM server, and I installed and patched before I began the SCVMM installation. I just don't know what else to try - I have no errors in event logs, no issues during the installation itself...
    Andrew Topp

    That answer was very unhelpful fr33m4n. The individual mentions that they've received the error that points to the KB article. I currently receive the same error -- there seems to be no resolution. I've run the Microsoft VBS script to add TAUG to the WAAG
    as suggested by 331951, and that made absolutely no difference.
    1) My SCVMM service account is a local admin on the SCVMM server
    2) My SCVMM service account is a dbowner on the SCVMM database in SQL
    3) My SQL service account is a dbowner on the SCVMM database in SQL
    4) My SQL service account is a domain user (even made it a domain admin, just in case, and it still
    "doesn't have access to AD DS," which is obviously untrue)
    The user is also a member of WAAG, the machines have delegated authority to each other. Is there any other solution?

  • ITunes Connect login - Apple ID does not have permission to access iTunes Connect.

    Hi,
    I have a company iPhone developer account which I registered two years ago.  I have renewed it and it has not expired.  I am the agent and I know the Apple ID and password as I login to the dev portal fine.  I am now trying to publish my first app under this account but I get this message when trying to log into iTunesConnect Apple ID does not have permission to access iTunes Connect.
    My account seems to be in some strange state as I invited another developer to my team (my hotmail email account) and then tried to make that user the Agent but that didn't even work, my new user shows up in the list of developers/team members, but I cannot select them in the dropdown to make them the agent, only my current agent name shows.
    Is this a hand off to Apple support situation?  I am up against a hard deadline and fear this is going to add significant delays waiting for Apple support to look into it (I've seen some other posts of people waiting 3 weeks with this problem and getting nowhere with support).
    Thanks in advance for any help,
    Paul

    I only had the one login before.  Yesterday to try to solve it I invited my hotmail account as a developer to the team.  I then tried to make that developer the agent, but even though it shows in the team members, I cannot select the account to be the agent as its not in the dropdown list.
    I am on OS X 10.7.3, using Safari.  The dev account did not expire, I renewed it in April 2012 so there is plenty of time left on it.  I am really stuck, this is so frustrating.

Maybe you are looking for