Enable LDAP debugging using the mod_python Apache configuration directive

  PythonOption IPADebug On/Off

1 files changed, 3 insertions, 2 deletions

diff --git a/ipa-server/ipaserver/ipaldap.py b/ipa-server/ipaserver/ipaldap.py
index 69d909222..ffbb2168d 100644
--- a/ipa-server/ipaserver/ipaldap.py
+++ b/ipa-server/ipaserver/ipaldap.py
@@ -209,13 +209,14 @@ class IPAdmin(SimpleLDAPObject):
         else:
             SimpleLDAPObject.__init__(self,'ldap://%s:%d' % (self.host,self.port))
 
-    def __init__(self,host,port,cacert,bindcert,bindkey,proxydn=None):
+    def __init__(self,host,port,cacert,bindcert,bindkey,proxydn=None,debug=None):
         """We just set our instance variables and wrap the methods - the real
            work is done in __localinit__ and __initPart2 - these are separated
            out this way so that we can call them from places other than
            instance creation e.g. when we just need to reconnect, not create a
            new instance"""
-#        ldap.set_option(ldap.OPT_DEBUG_LEVEL,255)
+        if debug.lower() == "on":
+            ldap.set_option(ldap.OPT_DEBUG_LEVEL,255)
         if cacert is not None:
             ldap.set_option(ldap.OPT_X_TLS_CACERTFILE,cacert)
             ldap.set_option(ldap.OPT_X_TLS_CERTFILE,bindcert)