Re: database monitor

[Friedrich Locke <friedrich.locke@gmail.com>]

Now i am really confused.
I removed database monitor section with all its access rules.

Here it my slapd.conf (only access rules parts):

access to dn.one="ou=appsrv,dc=ufv,dc=br" attrs=userpassword
        by self read
        by anonymous auth
        by * none

access to dn.one="ou=appsrv,dc=ufv,dc=br"
        by self read
        by * none

access to dn.one="ou=people,dc=ufv,dc=br" attrs=userpassword
        by self read
        by anonymous auth
        by * none

access to dn.one="ou=people,dc=ufv,dc=br"
        by self read
        by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by * none

access to dn.base="ou=people,dc=ufv,dc=br" attrs=entry
        by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by * none

access to dn.one="ou=group,dc=ufv,dc=br"
        by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by * none

access to dn.base="ou=group,dc=ufv,dc=br" attrs=entry
        by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by * none


Here is what i got from slapd output log:

@(#) $OpenLDAP: slapd 2.4.23 (Jun 28 2011 17:55:44) $
        @gustav.cpd.ufv.br:/usr/ports/pobj/openldap-2.4.23/build-amd64/servers/slapd
Backend ACL: access to dn.one="ou=appsrv,dc=ufv,dc=br"
 attrs=userpassword
        by self read
        by anonymous auth
        by * none

Backend ACL: access to dn.one="ou=appsrv,dc=ufv,dc=br"
        by self read
        by * none

Backend ACL: access to dn.one="ou=people,dc=ufv,dc=br"
 attrs=userpassword
        by self read
        by anonymous auth
        by * none

Backend ACL: access to dn.base="ou=people,dc=ufv,dc=br"
 attrs=entry
        by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by * none

Backend ACL: access to dn.one="ou=group,dc=ufv,dc=br"
        by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by * none

Backend ACL: access to dn.base="ou=group,dc=ufv,dc=br"
 attrs=entry
        by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read
        by * none

Backend ACL: access to *
        by * none

config_back_db_open: line 0: warning: cannot assess the validity of
the ACL scope within backend naming context
bdb_monitor_db_open: monitoring disabled; configure monitor database to enable
slapd starting

As you can see i have no access rule (access to * by * none) and it
(the rule) insists in appearing in the log, why?