Re: Access to cn=monitor from read-only ldap

[Quanah Gibson-Mount]

--On Tuesday, November 21, 2023 3:27 PM +0100 Kevin Cousin <k...@ik.me> 
wrote:


Hi List,



I've got an LDAP architecture with one read-write OpenLDAP (primary)  and
some read-only OpenLDAP  (replica).



I load the cn=monitor backend on the primary? is it sufficient to have
the cn=monitor backend on the slave too or should I activate it on the
replicas ?

I generally enable cn=config on all my ldap servers, so I can gather their 
individual statistics. Lots of monitoring software out there supports 
cn=monitor as well (Datadog, Grafana, etc)

--Quanah