[Date Prev][Date Next] [Chronological] [Thread] [Top]

Check synchro : access only to contextcsn

To: openldap-technical@openldap.org
Subject: Check synchro : access only to contextcsn
From: Lirien Maxime <maxime.lirien@gmail.com>
Date: Tue, 16 Oct 2018 15:51:50 +0200
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=MvczOgURCsL8tHvnpw37f7EUeAUFw4+UBUn5OuPD4jU=; b=YKLXJI9aS8t8fAtaJB8yFBxx03VFeAkffZwDP8ocU9NtC5/fQomHrv/jX7hW4p0Qk9 QEaNjmEEu19SFZ7S8ys8zxDVLieBg5lMmZi2AobRUvuvy/zh0fjmXb4VHVi2KR9FAqSC TxvAxPcUlw6vXS/PImG1QENZCFmtD/oXlWY96fxyqsTHzknJ9QbrAoK1nT7T5jbRDgIE wv0DlBsnnOs+UbYckBHxPc6kGK7Bavht3tuxUlNBnCREZ5+bsObZalnEFgmoZyLGKluO Qv9MLccJX4OPdMd3BGToI0ZG8RzrwfZ0WRrMfmq7ZU1UuZlDBkZSJ0xnX5Mkg2L3fD5u yYlw==

Hi all,

thanks for reading.

I have a "supervision" account on all my ldap servers. With the plugin nagios , it check the synchro. I would like this account read only contextcsn to check synchro. And only contextcsn not the other entries.

(plugin check nagios).

Can someone help me to write the right ACL ?

Here what I tried but not really right :-/
# ContextCSN
access to dn.subtree="dc=fr" attrs=contextCSN
by dn.subtree="cn=supervision,ou=Comptes Clients,dc=fr" read
by * none

Thanks.

Follow-Ups:
- Re: Check synchro : access only to contextcsn
  - From: Dieter Klünter <dieter@dkluenter.de>

Prev by Date: Re: Password policy messages - how can I pass back
Next by Date: Re: Check synchro : access only to contextcsn
Index(es):
- Chronological
- Thread