add attribute values in the audit logs
Requirements
it requires new config attributes in fusion directory schema
Descriptive title for this enhancement
When making an action on any entry, the values are not logged in the audit logs.
It could be interesting to have the details of the action. For example:
Object Values: add:description=foo
Object Values: replace:cn=bar
Object Values: delete:l
Current behavior
No value logged in the audit logs
Expected behavior
Values logged in the audit logs, in case of changetype: add
or changetype: modify
For changetype: modify
, we should also log if the attribute has been deleted / replaced / added.
Benefits
Better audit logging
Possible Drawbacks
Consume much more data in LDAP. Maybe we should have an option to enable / disable value logging.