Project

General

Profile

Actions
Copy link

Bug #9818

closed

Rudder's LDAP server configuration does not allow to query the monitor DB

Added by Jonathan CLARKE over 7 years ago. Updated about 7 years ago.

Status:
Released
Priority:
N/A
Assignee:
Benoît PECCATTE
Category:
Server components
Target version:
3.1.18
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

Since we added strict ACLs in the LDAP server configuration for Rudder, it is no longer possible to query the cn=monitor backend, that provides useful statistics about the database usage and queries, in particular cache usage for the BDB/HDB backend.

This is because the ACLs do not allow any access except for the strict minimum, but the root DN for the main database bypasses ACLs so that has never been a problem. Since cn=monitor is actually a different database, the root DN from the main database doesn't have that bypass.

We need to add in an ACL to allow this.

Actions
Copy link

Also available in: Atom PDF