[389-users] Re: repl-monitor.pl - monitoring user

On Fri, 2018-09-07 at 16:30 -0400, Mark Reynolds wrote:
>
> On 09/07/2018 04:14 AM, rainer@ultra-secure.de wrote:
> > Hi,
> >
> > I'd like to define a special user just for monitoring the
> > replication
> > (instead of using the Directory Manager).
> >
> > What kind of permissions does that user need?
> >
> > Or does that user need to many privileges that I could use the
> > Directory Manager anyway?
>
> The user needs permission to read "cn=mapping tree,cn=config" in
> order
> to read the agreement information, and to read from your suffix's
> RUV
> entry under "dc=example,dc=com" for nsds50ruv & nsds5agmtmaxcsn

Maybe we should add some extra default ACI for the new example backend,
and a monitoring group perhaps?

> >
> >
> >
> >
> > Rainer
> > _______________________________________________
> > 389-users mailing list -- 389-users@lists.fedoraproject.org
> > To unsubscribe send an email to 389-users-leave@lists.fedoraproject
> > .org
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidel
> > ines
> > List Archives:
> > https://lists.fedoraproject.org/archives/list/389-users@lists.fedor
> > aproject.org
>
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.o
> rg
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelin
> es
> List Archives: https://lists.fedoraproject.org/archives/list/389-user
> s@lists.fedoraproject.org
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org