Monitoring OpenLDAP

Michael Ströder

stroeder.com

Abstract

This lightning talk shows how OpenLDAP servers can be thoroughly monitored (example script for check_mk). Of course accessing various entries in cn=monitor is shown, but also how looking at cn=config can help to let the check script e.g. automagically determine the replication topology and use the very same parameters to access its configured syncrepl providers.

Biography

Michael Ströder works since 16 years as a consultant for LDAP based directory services and identity/access management. His main interest is building highly secure infrastructures.

He’s also the author of the LDAP client web application web2ldap (see http://www.web2ldap.de) and maintainer of the Python LDAP module (see http://www.python-ldap.org).