[389-users] user privileges needed to run repl-monitor.pl

Hi,

I've been using repl-monitor.pl for monitoring replication problems. I would like to use an account with a minimal set of permissions needed for the functionality. I created a user and added the permission to Read Replication Agreements. Now the user can read the agreements but fails on:

$ruv = $conn->search($replicaroot, "one", "(&(nsuniqueid=ffffffff-ffffffff-ffffffff-ffffffff)(objectClass=nsTombstone))", 0, qw(nsds50ruv nsruvReplicaLastModified nsds5AgmtMaxCSN));

Rather, the $ruv is empty after that call. When running with a privileged account, everything works.

What are the permissions needed for that search to work for a brand new account?

Thanks,

  Sergei