On Fri, 2018-09-07 at 16:30 -0400, Mark Reynolds wrote: > > On 09/07/2018 04:14 AM, rainer@xxxxxxxxxxxxxxx wrote: > > Hi, > > > > I'd like to define a special user just for monitoring the > > replication > > (instead of using the Directory Manager). > > > > What kind of permissions does that user need? > > > > Or does that user need to many privileges that I could use the > > Directory Manager anyway? > > The user needs permission to read "cn=mapping tree,cn=config" in > order > to read the agreement information, and to read from your suffix's > RUV > entry under "dc=example,dc=com" for nsds50ruv & nsds5agmtmaxcsn Maybe we should add some extra default ACI for the new example backend, and a monitoring group perhaps? > > > > > > > > > > Rainer > > _______________________________________________ > > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > > To unsubscribe send an email to 389-users-leave@lists.fedoraproject > > .org > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidel > > ines > > List Archives: > > https://lists.fedoraproject.org/archives/list/389-users@lists.fedor > > aproject.org > > _______________________________________________ > 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to 389-users-leave@lists.fedoraproject.o > rg > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelin > es > List Archives: https://lists.fedoraproject.org/archives/list/389-user > s@xxxxxxxxxxxxxxxxxxxxxxx _______________________________________________ 389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx
