Re: Access to cn=monitor from read-only ldap

--On Tuesday, November 21, 2023 3:27 PM +0100 Kevin Cousin kco@ik.me wrote:

Hi List,

I've got an LDAP architecture with one read-write OpenLDAP (primary) and some read-only OpenLDAP (replica).

I load the cn=monitor backend on the primary? is it sufficient to have the cn=monitor backend on the slave too or should I activate it on the replicas ?

I generally enable cn=config on all my ldap servers, so I can gather their individual statistics. Lots of monitoring software out there supports cn=monitor as well (Datadog, Grafana, etc)

--Quanah