Missing LDAP Logs

[Kloppi313]

Hello,

unfortunally my AD Configuration does not work anymore.
I recognized, not after every try to login with the same user TCP packets are sent (it feels like kind of caching).
I am not able to see any netbox written LDAP logs.

I uncommented configuration/logging.py activated Debugging and restarted the containers. With a local user I see "Debug mode is enabled".

My first step would be to inspect LDAP logs, but I am not able to:

docker compose logs -f netbox netbox-worker | grep -i ldap
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/ldap_config.py'
netbox-1         | 溺 loaded config '/etc/netbox/config/ldap/extra.py'

My configuration/logging.py

# Remove first comment(#) on each line to implement this working logging example.
# Add LOGLEVEL environment variable to netbox if you use this example & want a different log level.
from os import environ

# Set LOGLEVEL in netbox.env or docker-compose.overide.yml to override a logging level of INFO.
LOGLEVEL = environ.get('LOGLEVEL', 'INFO')

LOGGING = {

   'version': 1,
   'disable_existing_loggers': False,
   'formatters': {
       'verbose': {
           'format': '{levelname} {asctime} {module} {process:d} {thread:d} {message}',
           'style': '{',
       },
       'simple': {
           'format': '{levelname} {message}',
           'style': '{',
       },
   },
   'filters': {
       'require_debug_false': {
           '()': 'django.utils.log.RequireDebugFalse',
       },
   },
   'handlers': {
       'console': {
           'level': LOGLEVEL,
           'filters': ['require_debug_false'],
           'class': 'logging.StreamHandler',
           'formatter': 'simple'
       },
       'mail_admins': {
           'level': 'ERROR',
           'class': 'django.utils.log.AdminEmailHandler',
           'filters': ['require_debug_false']
       }
   },
   'loggers': {
       'django': {
           'handlers': ['console'],
           'propagate': True,
       },
       'django.request': {
           'handlers': ['mail_admins'],
           'level': 'ERROR',
           'propagate': False,
       },
       'django_auth_ldap': {
           'handlers': ['console',],
           'level': LOGLEVEL,
       }
   }
}

How do I get the LDAP Logs?

Docker version 27.5.1, build 27.5.1-0ubuntu3~24.04.2
commit b1394ff9cb1b96ec1cb0d9f6162a07bf8eff92ad (tag: 3.4.0, origin/release, origin/HEAD)

At the end of env/netbox.env I put

LOGLEVEL='DEBUG'
DEBUG=true

[Kloppi313]

I could solve it myself.
The docs seem to be outdated.

Add

# Logging details
import logging, logging.handlers
logfile = "/var/log/netbox/django-ldap-debug.log"
my_logger = logging.getLogger('django_auth_ldap')
my_logger.setLevel(logging.DEBUG)
handler = logging.handlers.RotatingFileHandler(
logfile, maxBytes=1024 * 500, backupCount=5)
my_logger.addHandler(handler)

To the end of configuration/ldap/ldap_config.py and restart containers.

You have to be sure, you are able to run touch /var/log/netbox/django-ldap-debug.log

[Kloppi313]

And I could maybe also solve the login problems:

If your AD administration forgets to disable passwordrotation for the bind user, then you will have - out of nowhere - login problems with AD.