Bug#927256: add a monitor database to the default configuration

2019-04-16 Thread Ryan Tandy
Below is an example config from Quanah that demonstrates a monitor setup as well as his suggestion of using an authz-regexp for the cn=config root. dn: cn=config objectClass: olcGlobal cn: config olcLogLevel: sync olcLogLevel: stats olcPidFile: /var/run/slapd/slapd.pid olcArgsFile:

Bug#927256: add a monitor database to the default configuration

2019-04-16 Thread Ryan Tandy
Package: slapd Severity: wishlist Control: submitter -1 qua...@openldap.org In IRC, Quanah suggested that we add a monitor instance to the default configuration. The monitor DB should not be world readable. Granting access to cn=admin,... and the cn=config owner would be a good start.