HP-UX Directory Server Administrator Guide HP-UX Directory Server Version 8.1 (5900-3098, May 2013)

8.16.4 Retro changelog and the access control policy
When the retro changelog is created, the following access control rules apply by default:
• Read, search, and compare rights are granted to all authenticated users (userdn=anyone),
not to be confused with anonymous access where userdn=all) to the retro changelog top
entry cn=changelog.
• Write and delete access are not granted, except implicitly to the Directory Manager.
Do not grant read access to anonymous users because the changelog entries can contain
modifications to sensitive information, such as passwords. Only authenticated applications and
users should be allowed to access this information.
To modify the default access control policy that applies to the retro changelog, modify the aci
attribute of the cn=changelog entry.
8.17 Monitoring replication status
The replication status can be viewed in the Directory Server Console or Administration Express.
• “Monitoring replication status from the Directory Server Console” (page 383)
• “Monitoring replication status from administration express” (page 384)
8.17.1 Monitoring replication status from the Directory Server Console
To view a summary of replication status in the Directory Server Console:
1. Open the Directory Server Console.
2. Select the Status tab, then, in the left navigation tree, select Replication Status.
In the right pane, a table appears that contains information about each of the replication
agreements configured for this server.
3. Click Refresh to update the contents of the tab.
The status information displayed is described in Table 41 (page 383).
Table 41 Directory Server Console replication status
DescriptionTable header
The name of the replication agreement.Agreement
The suffix that is replicated.Replica suffix
The supplier server in the agreement.Supplier
The consumer server in the agreement.Consumer
The number of changes sent to this replica since the server started.Number of changes
The time when the most recent replication update started.Last replica update began
The time when the most recent replication update ended.Last replica update ended
The status for the most recent replication updates.Last update message
The current status on consumer initialization (in progress or not).Consumer initialization
The status on the last initialization of the consumer.Last consumer initialization
update message
The time when the initialization of the consumer replica started.Last consumer initialization
began
The time when the initialization of the consumer replica ended.Last consumer initialization
ended
8.17 Monitoring replication status 383