[389-users] Searching cn=config as a user other than cn=Directory Manager?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm working on setting up nagios monitoring of our multi-master replication, and given the occasional problems that are plaguing our network, we need replication monitoring. The script on http://directory.fedoraproject.org/wiki/Howto:ReplicationMonitoring#Monitoring_replication_with_Nagios is very helpful, but it assumes logging in as the Directory Manager.

We've had sufficient problems with "helpful" people becoming root and doing things that I'm *really* wary of putting the Directory Manager password in plaintext in a monitoring script, but searching as cn=replication,cn=config or similar results doesn't return any results. Can someone point me at the ACI I need to modify (or do I need to create a new one?) to add read-only access to cn=config on our master servers for monitoring purposes? Thanks!

   -- juniper

--
,___,
{o,o}  Anne "Juniper" Cross
(___)  Senior Linux Systems Engineer and Extropic Crusader
-"-"-- Information Technology, ITA Software
/^^^

--
389 users mailing list
389-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux