Disable User Sync Logging

[bennettblack]

Hello! ,

I know that you can disable authentication event logging with the LDAP_LOGGING environment variable. Is there a way to disable the user sync event logging?

[stevebauman]

Hey @bennettblack!

Logging is globally controlled via the logging (defaulted to the LDAP_LOGGING value) configuration option:

LdapRecord-Laravel/config/ldap.php

Line 55 in e2e0439

'logging' => env('LDAP_LOGGING', true),

All events use the Loggable trait will not be logged if this configuration option is set to false:

LdapRecord-Laravel/src/Events/Loggable.php

Lines 19 to 27 in e2e0439

	/**
	* Determine if event should be logged.
	*
	* @return bool
	*/
	public function shouldLogEvent()
	{
	return Config::get('ldap.logging', false);
	}

LdapRecord-Laravel/src/LdapAuthServiceProvider.php

Lines 77 to 91 in 05c99ea

	/**
	* Registers the LDAP event listeners.
	*
	* @return void
	*/
	protected function registerEventListeners()
	{
	Event::listen('LdapRecord\Laravel\Events\*', function ($eventName, array $events) {
	collect($events)->filter(function ($event) {
	return $event instanceof LoggableEvent && $event->shouldLogEvent();
	})->each(function (LoggableEvent $event) {
	Log::log($event->getLogLevel(), $event->getLogMessage());
	});
	});
	}

Are you still seeing log entries when you have this option disabled?

[stevebauman]

Are you perhaps caching your configuration files? Try running php artisan config:clear to make sure and then report back 👍

[bennettblack]

Cleared config cache and confirmed these events are still logging. I do have a custom User model customization you helped me with - It has a global scope to only import users that have an email address in AD. That custom model is referenced in auth.php providers config:

'users' => [
    'driver'   => 'ldap',
    // 'model'    => LdapRecord\Models\ActiveDirectory\User::class,
    'model'    => App\Models\Ldap\User::class,
    'rules'    => [],
    'database' => [
         'model'           => App\Models\User::class,
         'sync_passwords'  => true,
         'sync_attributes' => [
             'name'  => 'cn',
             'email' => 'mail',
         ],
         'sync_existing' => [
            'email' => 'mail',
         ],
    ],
],

Could that be affecting the logging behavior?

[stevebauman]

Thanks for checking that @bennettblack. Your auth configuration shouldn't have any affect on logging.

Can you confirm both the LdapRecord and LdapRecord-Laravel version you're using? You can check this by running the below command:

composer info | grep directorytree

Also, are you by chance loading multiple LDAP connections using your .env file? Wondering if this may be the cause:

LdapRecord-Laravel/src/LdapServiceProvider.php

Line 153 in 3871350

Config::set('ldap.logging', env('LDAP_LOGGING', true));

[bennettblack]

Just double checked, I only have the one LDAP connection defined in my .env. Here's my version:

[stevebauman]

Hmm I'm not able to reproduce this. Setting LDAP_LOGGING=false or overriding the .env variable in the ldap.php configuration file results in no logs being output.

Can you post your config/ldap.php file and your .env with any sensitive details omitted?

[bennettblack]

I previously thought I'd fixed this but I was wrong. I did figure out what I needed though - just had to add
--no-log to my scheduled import command. Thanks Steve!

[stevebauman]

Awesome, that's great to hear @bennettblack! Thanks for following up 🙏