Hi,
I'd like to define a special user just for monitoring the replication (instead of using the Directory Manager).
What kind of permissions does that user need?
Or does that user need to many privileges that I could use the Directory Manager anyway?
Rainer
On 09/07/2018 04:14 AM, rainer@ultra-secure.de wrote:
Hi,
I'd like to define a special user just for monitoring the replication (instead of using the Directory Manager).
What kind of permissions does that user need?
Or does that user need to many privileges that I could use the Directory Manager anyway?
The user needs permission to read "cn=mapping tree,cn=config" in order to read the agreement information, and to read from your suffix's RUV entry under "dc=example,dc=com" for nsds50ruv & nsds5agmtmaxcsn
Rainer _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject....
On Fri, 2018-09-07 at 16:30 -0400, Mark Reynolds wrote:
On 09/07/2018 04:14 AM, rainer@ultra-secure.de wrote:
Hi,
I'd like to define a special user just for monitoring the replication (instead of using the Directory Manager).
What kind of permissions does that user need?
Or does that user need to many privileges that I could use the Directory Manager anyway?
The user needs permission to read "cn=mapping tree,cn=config" in order to read the agreement information, and to read from your suffix's RUV entry under "dc=example,dc=com" for nsds50ruv & nsds5agmtmaxcsn
Maybe we should add some extra default ACI for the new example backend, and a monitoring group perhaps?
Rainer _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject .org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidel ines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedor aproject.org
389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.o rg Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelin es List Archives: https://lists.fedoraproject.org/archives/list/389-user s@lists.fedoraproject.org
389-users@lists.fedoraproject.org
-
Mark Reynolds -
rainer＠ultra-secure.de -
William Brown