Skip to content

OpenLDAP

Auto-Discovery
Health Check
Metrics
Logs

To enable metrics gathering, you need to enable the slapd monitoring backend, and to set a bind CN and password in the agent configuration so it can access the metrics.

If some auto-detected parameters are wrong or you want to configure metric gathering, you can add the following to /etc/glouton/conf.d/99-local.conf:

service:
[...]
# For an OpenLDAP running outside a container
- type: "openldap"
address: "127.0.0.1"
port: 389
# dn/password to bind with. If username is empty, an anonymous bind is performed.
username: "cn=admin,dc=example,dc=org"
password: "adminpassword"
# Use ldaps, note that port will likely need to be changed to 636.
ssl: true
# Use StartTLS (note that you can't enable both ssl and starttls at the same time).
starttls: true
# Don't verify host certificate.
ssl_insecure: true
# Path to PEM-encoded Root certificate to use to verify the server certificate.
ca_file: "/myca"
# For an additional OpenLDAP running outside a container
- type: "openldap"
instance: "NAME_ASSOCIATED_WITH_YOUR_ADDITIONAL_SERVICE"
address: "127.0.0.1"
port: 390
username: "cn=admin,dc=example,dc=org"
password: "adminpassword"
# For an OpenLdap running in a Docker container
- type: "openldap"
instance: "CONTAINER_NAME"
address: "172.17.0.2"
port: 389
username: "cn=admin,dc=example,dc=org"
password: "adminpassword"

The following metrics are gathered:

MetricDescription
service_statusStatus of OpenLDAP
openldap_connections_currentCurrent number of active connections
openldap_waiters_readNumber of threads blocked waiting to read data from a client
openldap_waiters_writeNumber of threads blocked waiting to write data to a client
openldap_threads_activeThreads (operations) currently active in slapd
openldap_statistics_bytesOutgoing bytes per second
openldap_statistics_entriesOutgoing entries per second
openldap_operations_add_completedNumber of add operations per second
openldap_operations_bind_completedNumber of bind operations per second
openldap_operations_delete_completedNumber of delete operations per second
openldap_operations_modify_completedNumber of modify operations per second
openldap_operations_search_completedNumber of search operations per second