Now i am really confused. I removed database monitor section with all its access rules.
Here it my slapd.conf (only access rules parts):
access to dn.one="ou=appsrv,dc=ufv,dc=br" attrs=userpassword by self read by anonymous auth by * none
access to dn.one="ou=appsrv,dc=ufv,dc=br" by self read by * none
access to dn.one="ou=people,dc=ufv,dc=br" attrs=userpassword by self read by anonymous auth by * none
access to dn.one="ou=people,dc=ufv,dc=br" by self read by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by * none
access to dn.base="ou=people,dc=ufv,dc=br" attrs=entry by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by * none
access to dn.one="ou=group,dc=ufv,dc=br" by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by * none
access to dn.base="ou=group,dc=ufv,dc=br" attrs=entry by dn.exact="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by * none
Here is what i got from slapd output log:
@(#) $OpenLDAP: slapd 2.4.23 (Jun 28 2011 17:55:44) $ @gustav.cpd.ufv.br:/usr/ports/pobj/openldap-2.4.23/build-amd64/servers/slapd Backend ACL: access to dn.one="ou=appsrv,dc=ufv,dc=br" attrs=userpassword by self read by anonymous auth by * none
Backend ACL: access to dn.one="ou=appsrv,dc=ufv,dc=br" by self read by * none
Backend ACL: access to dn.one="ou=people,dc=ufv,dc=br" attrs=userpassword by self read by anonymous auth by * none
Backend ACL: access to dn.base="ou=people,dc=ufv,dc=br" attrs=entry by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by * none
Backend ACL: access to dn.one="ou=group,dc=ufv,dc=br" by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by * none
Backend ACL: access to dn.base="ou=group,dc=ufv,dc=br" attrs=entry by dn.base="cn=ypldap,ou=appsrv,dc=ufv,dc=br" read by * none
Backend ACL: access to * by * none
config_back_db_open: line 0: warning: cannot assess the validity of the ACL scope within backend naming context bdb_monitor_db_open: monitoring disabled; configure monitor database to enable slapd starting
As you can see i have no access rule (access to * by * none) and it (the rule) insists in appearing in the log, why?