Re: Recommended ACL for nagios monitoring

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Subject: Re: Recommended ACL for nagios monitoring

From: ML mail <mlnospam@yahoo.com>

Date: Mon, 25 Nov 2013 08:13:15 -0800 (PST)

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1385395995; bh=fLReODLg49V/WEBmT0InZreR1kDuuabpYccOJ2ouI8Y=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=dUfCl4O9U3NGVkJJ5bJ1dnmfUuhuhlntN4S2teK2UDzchpsEszTfWhQpENFfw9JYKH//PMI/puo5PeRsrgiekTSVY12yJoo4RQoBAKFm4sd85xHWMLwL2z0Ji1KSUCkWf1dSyIlgqF2eGR357/JHeSiBhtBfYfXBfcdJ9P5xnDQ=

Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=YRr+XwlsfscnaKfVZsEMY0TTGu/eF1DdpU8Wy3qo/yKYGlaTZodilksjAXSApLBnZ8LUz6fEkWTF7mytBeXC1f8/qA0K/QsDYOhuHqAP1EufA7DqT9faQFJfZoFVWzpJCC2m+BbEDLgI8Kn8vV5t72goEngfN0y/y2hH4kkBVZc=;

In-reply-to: <20131125160614.3bd18b8e@pink.avci.de>

References: <1385378455.11738.YahooMailNeo@web164601.mail.gq1.yahoo.com> <20131125160614.3bd18b8e@pink.avci.de>

Thanks for your answers. Btw check_ldap from nagios has a -3 option to enable LDAPv3 queries. the tlb-project.org has very nice nagios plugins, will try them out asap.

ML

On Monday, November 25, 2013 4:07 PM, Dieter Klünter <dieter@dkluenter.de> wrote:

Am Mon, 25 Nov 2013 03:20:55 -0800 (PST)

schrieb ML mail <mlnospam@yahoo.com>:

> Hello,
>
> I would like to monitor connectivity to my OpenLDAP using nagios with
> its check_ldap script and was wondering which minimal ACL would you
> recommend for that purpose?
>
> For that purpose I will be using a dedicated user such as
> cn=nagios,ou=users,dc=domain,dc=tld and would like it just to be able
> to bind to dc=domain,dc=tld and nothing else. Any recommendations?

As far as I remember, this check_ldap file ist still LDAPv2, you should
probably try
http://ltb-project.org/wiki/documentation#monitoring

-Dieter

--
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:DA147B05
53°37'09,95"N
10°08'02,42"E