From bc15b653b1af12a2608744ae7c017bf6bdce6257 Mon Sep 17 00:00:00 2001
From: Tomas Edwardsson <tommi@tommi.org>
Date: Sun, 27 Oct 2013 22:57:43 +0000
Subject: [PATCH] Added examples and documentation

---
 check_ipa/README                              | 20 +++++++++++++++++--
 .../grant_anonymous_replication_view.ldif     |  4 ++++
 check_ipa/nagios-okplugin-ipa.spec            |  1 +
 3 files changed, 23 insertions(+), 2 deletions(-)
 create mode 100644 check_ipa/grant_anonymous_replication_view.ldif

diff --git a/check_ipa/README b/check_ipa/README
index 0629b53..e23e546 100644
--- a/check_ipa/README
+++ b/check_ipa/README
@@ -1,3 +1,19 @@
-check_ipa
+check_ipa_replication
+=====================
+You need some configuration for this plugin to have access to replication
+information.
+
+Allow anonymous read to replication information
+-----------------------------------------------
+You will need to do this for every IPA server, masters and replicas
+
+```
+ldapmodify -x -D "cn=directory manager" -W -f grant_anonymous_replication_view.ldif -h ipa-host.example.com
+```
+
+Configure the directory manager credentials
+-------------------------------------------
+NOT RECOMENDED, you can use -D and -w with the directory manager credentials
+and the plugin will work as expected.
+
 
-Various checks for IPA http://freeipa.org/ server
diff --git a/check_ipa/grant_anonymous_replication_view.ldif b/check_ipa/grant_anonymous_replication_view.ldif
new file mode 100644
index 0000000..0d1ce0c
--- /dev/null
+++ b/check_ipa/grant_anonymous_replication_view.ldif
@@ -0,0 +1,4 @@
+dn: cn="dc=mr,dc=lan",cn=mapping tree,cn=config
+changetype: modify
+add: aci
+aci: (targetattr=*)(targetfilter="(|(objectclass=nsds5replicationagreement)(objectclass=nsDSWindowsReplicationAgreement))")(version 3.0; aci "permission:Read Replication Agreements"; allow (read, search, compare) groupdn = "ldap:///anyone";)
diff --git a/check_ipa/nagios-okplugin-ipa.spec b/check_ipa/nagios-okplugin-ipa.spec
index 4e78aa5..17bc04a 100644
--- a/check_ipa/nagios-okplugin-ipa.spec
+++ b/check_ipa/nagios-okplugin-ipa.spec
@@ -37,6 +37,7 @@ rm -rf %{buildroot}
 %files
 %defattr(-,root,root,-)
 %doc README
+%doc grant_anonymous_replication_view.ldif
 %{_libdir}/nagios/plugins/*
 %config(noreplace) %{_sysconfdir}/nrpe.d/check_ipa.cfg