From f24f936c69ee97cca6095923549430cb6d510320 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Wed, 10 Jun 2015 18:16:13 +0200
Subject: slapd monitoring.

We don't use the provided 'slapd_' Munin plugin because it doesn't
support SASL binds.
---
 roles/common-LDAP/templates/etc/ldap/database.ldif.j2 | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'roles/common-LDAP/templates/etc/ldap/database.ldif.j2')

diff --git a/roles/common-LDAP/templates/etc/ldap/database.ldif.j2 b/roles/common-LDAP/templates/etc/ldap/database.ldif.j2
index b2981b3..5f9d8b1 100644
--- a/roles/common-LDAP/templates/etc/ldap/database.ldif.j2
+++ b/roles/common-LDAP/templates/etc/ldap/database.ldif.j2
@@ -47,6 +47,14 @@ olcPasswordHash: {CRYPT}
 olcPasswordCryptSaltFormat: $6$%s
 
 
+dn: olcDatabase=monitor,cn=config
+objectClass: olcDatabaseConfig
+objectClass: olcMonitorConfig
+olcAccess: to dn.subtree="cn=monitor"
+    by dn.exact="username=munin,cn=peercred,cn=external,cn=auth" sockurl.regex="^ldapi://" read
+    by * =0
+
+
 dn: olcDatabase=mdb,cn=config
 objectClass: olcDatabaseConfig
 objectClass: olcMdbConfig
-- 
cgit v1.2.3