[389-users] Searching cn=config as a user other than cn=Directory Manager?

[Anne Cross]

I'm working on setting up nagios monitoring of our multi-master 
replication, and given the occasional problems that are plaguing our 
network, we need replication monitoring.  The script on 
http://directory.fedoraproject.org/wiki/Howto:ReplicationMonitoring#Monitoring_replication_with_Nagios 
is very helpful, but it assumes logging in as the Directory Manager.

We've had sufficient problems with "helpful" people becoming root and 
doing things that I'm *really* wary of putting the Directory Manager 
password in plaintext in a monitoring script, but searching as 
cn=replication,cn=config  or similar results doesn't return any results. 

Can someone point me at the ACI I need to modify (or do I need to create 
a new one?) to add read-only access to cn=config on our master servers 
for monitoring purposes?  Thanks!

    -- juniper

-- 
,___,
{o,o}  Anne "Juniper" Cross
(___)  Senior Linux Systems Engineer and Extropic Crusader
-"-"-- Information Technology, ITA Software
/^^^