Home | History | Annotate | Line # | Download | only in man
      1 .lf 1 stdin
      2 .TH SLAPD-MONITOR 5 "2025/05/22" "OpenLDAP 2.6.10"
      3 .\" Copyright 1998-2024 The OpenLDAP Foundation All Rights Reserved.
      4 .\" Copying restrictions apply.  See COPYRIGHT/LICENSE.
      5 .\" $OpenLDAP$
      6 .SH NAME
      7 slapd\-monitor \- Monitor backend to slapd
      8 .SH SYNOPSIS
      9 /etc/openldap/slapd.conf
     10 .SH DESCRIPTION
     11 The 
     12 .B monitor 
     13 backend to
     14 .BR slapd (8)
     15 is not an actual database; if enabled, it is automatically generated
     16 and dynamically maintained by 
     17 .B slapd 
     18 with information about the running status of the daemon.
     19 .LP
     20 To inspect all monitor information, issue a subtree search with base
     21 cn=Monitor, requesting that attributes "+" and "*" are returned.
     22 The monitor backend produces mostly operational attributes, and LDAP
     23 only returns operational attributes that are explicitly requested.
     24 Requesting attribute "+" is an extension which requests all operational
     25 attributes.
     26 .SH CONFIGURATION
     27 These
     28 .B slapd.conf
     29 options apply to the 
     30 .B monitor 
     31 backend database.
     32 That is, they must follow a "database monitor" line and come before any
     33 subsequent "backend" or "database" lines.
     34 .LP
     35 As opposed to most databases, the 
     36 .B monitor 
     37 database can be instantiated only once, i.e. only one occurrence 
     38 of "database monitor" can occur in the 
     39 .BR slapd.conf (5)
     40 file.
     41 Moreover, the suffix of the database cannot be explicitly set by means
     42 of the 
     43 .B suffix
     44 directive.
     45 The suffix is automatically set
     46 to "\fIcn=Monitor\fP".
     47 .LP
     48 The
     49 .B monitor
     50 database honors the 
     51 .B rootdn
     52 and the
     53 .B rootpw
     54 directives, and the usual ACL directives, e.g. the
     55 .B access
     56 directive.
     57 .\".LP
     58 .\"The following directives can be used:
     59 .\".TP
     60 .\".BI l \ <locality>
     61 .\"The additional argument \fI<locality>\fP,
     62 .\"a string, is added to the "\fIcn=Monitor\fP" entry as value of the
     63 .\".B l
     64 .\"attribute (Note: this may be subjected to changes).
     65 .LP
     66 Other database options are described in the
     67 .BR slapd.conf (5)
     68 manual page.
     69 .SH USAGE
     70 The usage is:
     71 .TP
     72 1) enable the \fBmonitor\fP backend at configure:
     73 .LP
     74 .RS
     75 .nf
     76 configure \-\-enable\-monitor
     77 .fi
     78 .RE
     79 .TP
     80 2) activate the \fBmonitor\fP database in the \fBslapd.conf\fP(5) file:
     81 .LP
     82 .RS
     83 .nf
     84 database monitor
     85 .fi
     86 .RE
     87 .TP
     88 3) add ACLs as detailed in \fBslapd.access\fP(5) to control access to the database, e.g.:
     89 .LP
     90 .RS
     91 .nf
     92 access to dn.subtree="cn=Monitor"
     93 	by dn.exact="uid=Admin,dc=my,dc=org" write
     94 	by users read
     95 	by * none
     96 .fi
     97 .RE
     98 .TP
     99 4) ensure that the \fBcore.schema\fP file is loaded.
    100 The 
    101 .B monitor 
    102 backend relies on some standard track attributeTypes
    103 that must be already defined when the backend is started.
    104 .SH ACCESS CONTROL
    105 The 
    106 .B monitor
    107 backend honors access control semantics as indicated in
    108 .BR slapd.access (5),
    109 including the 
    110 .B disclose
    111 access privilege, on all currently implemented operations.
    112 .SH KNOWN LIMITATIONS
    113 The 
    114 .B monitor 
    115 backend does not honor size/time limits in search operations.
    116 .SH FILES
    117 .TP
    118 .B /etc/openldap/slapd.conf
    119 default slapd configuration file
    120 .SH SEE ALSO
    121 .BR slapd.conf (5),
    122 .BR slapd\-config (5),
    123 .BR slapd.access (5),
    124 .BR slapd (8),
    125 .BR ldap (3).
    126 .SH ACKNOWLEDGEMENTS
    127 .lf 1 ./../Project
    128 .\" Shared Project Acknowledgement Text
    129 .B "OpenLDAP Software"
    130 is developed and maintained by The OpenLDAP Project <http://www.openldap.org/>.
    131 .B "OpenLDAP Software"
    132 is derived from the University of Michigan LDAP 3.3 Release.  
    133 .lf 127 stdin
    134