12.8. Logging Access Control Information

To obtain information on access control in the error logs, you must set the appropriate log level. To set the error log level from the Console:
  1. In the Console, click the Directory tab, right-click the config node, and choose Properties from the pop-up menu.
    This displays the Property Editor for the cn=config entry.
  2. Scroll down the list of attribute value pairs to locate the nsslapd-errorlog-level attribute.
  3. Add 128 to the value already displayed in the nsslapd-errorlog-level value field.
    For example, if the value already displayed is 8192 (replication debugging), change the value to 8320. For complete information on error log levels, see the Directory Server Configuration and Command-Line Tool Reference.
  4. Click OK to dismiss the Property Editor.