I'm working on setting up nagios monitoring of our multi-master replication, and given the occasional problems that are plaguing our network, we need replication monitoring. The script on http://directory.fedoraproject.org/wiki/Howto:ReplicationMonitoring#Monit... is very helpful, but it assumes logging in as the Directory Manager. We've had sufficient problems with "helpful" people becoming root and doing things that I'm *really* wary of putting the Directory Manager password in plaintext in a monitoring script, but searching as cn=replication,cn=config or similar results doesn't return any results. Can someone point me at the ACI I need to modify (or do I need to create a new one?) to add read-only access to cn=config on our master servers for monitoring purposes? Thanks! -- juniper -- ,___, {o,o} Anne "Juniper" Cross (___) Senior Linux Systems Engineer and Extropic Crusader -"-"-- Information Technology, ITA Software /^^^