Add openldap replication

1 files changed, 54 insertions, 0 deletions

diff --git a/modules/private/monitoring/plugins/check_openldap_replication b/modules/private/monitoring/plugins/check_openldap_replication
new file mode 100755
index 0000000..b511ff2
--- /dev/null
+++ b/modules/private/monitoring/plugins/check_openldap_replication
@@ -0,0 +1,54 @@
+#!/bin/bash
+
+STATE_OK=0
+STATE_WARNING=1
+STATE_CRITICAL=2
+STATE_UNKNOWN=3
+
+distant_host="$1"
+replication_dn="$2"
+replication_pw="$3"
+base="$4"
+config="$5"
+
+to_date() {
+  i="$1"
+  i=$(echo "$i" | grep contextCSN | cut -d":" -f2 | sed -e "s/\s//g")
+  i=$(echo "$i" | cut -d"#" -f1)
+  i=$(echo "$i" | cut -d"." -f1)
+  echo "$i"
+}
+
+# ldap
+remote_ldap=$(ldapsearch -H $distant_host -D "$replication_dn" -y "$replication_pw" -b "$base" -s base -LLL contextCSN )
+exit_code_remote=$?
+remote_ldap=$(to_date "$remote_ldap")
+
+# slapcat
+local_ldap=$(slapcat -b "$base" -f "$config" -a "(entryDN=$base)")
+exit_code_local=$?
+local_ldap=$(to_date "$local_ldap")
+
+offset=$(($remote_ldap - $local_ldap))
+
+if [[ $exit_code_remote -ne 0 || $exit_code_local -ne 0 ]]; then
+  echo "UNKNOWN - Impossible to run ldap command"
+  exit $STATE_UNKNOWN
+elif [[ -z "$offset" ]]; then
+  echo "UNKNOWN - No replication found"
+  exit $STATE_UNKNOWN
+else
+  output="Replication lag for openldap is ${offset}s"
+  LC_ALL=C lag=$(printf "%.*f" 0 $lag)
+
+  if [[ $offset -lt 5 ]]; then
+    echo "OK - $output"
+    exit $STATE_OK
+  elif [[ $offset -lt 10 ]]; then
+    echo "WARNING - $output"
+    exit $STATE_WARNING
+  else
+    echo "CRITICAL - $output"
+    exit $STATE_CRITICAL
+  fi
+fi