matthewponzio

Home Members matthewponzio

Learn more about our upcoming Identity Summits

show less show more
Profile picture of matthewponzio

@matthewponzio

active 3 years, 2 months ago
Points balance: 158 ♪
Rank: matthewponzio
  • Activity
  • Profile
  • Groups 0
  • Forums
  • Personal
  • Mentions
  • Favorites
  • Groups
  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6.0 – JMX Monitoring in the forum Directory Services 3 years, 4 months ago

    Oh..never mind, I found it…under HTTP-Based monitoring — http://localhost:8080/metrics/prometheus Now just need to figure out how to authenticate to it properly.

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6.0 – JMX Monitoring in the forum Directory Services 3 years, 4 months ago

    Ah, cool. So I’m trying to configure prometheus monitoring, but I can’t seem to find the prometheus endpoint url for OpenDJ in the docs? I tried http://localhost:8080/json/metrics/prometheus and http://localhost/json/metrics/prometheus, but no good:

    prometheus (2.0.0)
    ------------------
    Instance ID: prometheus:a054d854bd81b5a3…
    [Read more]

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6.0 – JMX Monitoring in the forum Directory Services 3 years, 4 months ago

    Hey, looks like I don’t have access to https://ea.forgerock.com/docs..

    Forbidden
    You don't have permission to access /docs/ds/monitoring-guide/chap-monitoring.html on this server.

    Could be because my Backstage account isn’t linked to a paid Support Agreement? The company I’m working at does have a support agreement, but I’m a consultant, and…[Read more]

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6.0 – JMX Monitoring in the forum Directory Services 3 years, 4 months ago

    Wow, awesome. Thanks so much for the diligent follow up! So yeah, looking the JMX MBeans from my DJ 3.5 servers, I see that ds-backend-entry-count was java.lang.String.

    I’ll definitely take a look at the docs you mentioned in your PS. Thanks again!!

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6.0 – JMX Monitoring in the forum Directory Services 3 years, 4 months ago

    I’ve shortened the output as much as possible, but this is the list of all the JMX Attributes/MBeans that the Datadog agent can see. It’s quite a lot, so that’s why I’m fairly sure my permissions and configuration are correct…but conspicuously missing from this list are ds-mon-current-delay and ds-mon-backend-entry-count

    Rdn1=cn-monitor,Rdn2=cn…[Read more]

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6.0 – JMX Monitoring in the forum Directory Services 3 years, 4 months ago

    Hi Ludo, thanks for the reply. Yes, we most definitely have the correct permissions. We’re using cn=Directory Manager user and we also are using the correct service URL.

    As I said, I am able to see most all of the JMX attributes/metrics under cn=montior, so I’m all but certain we have the correct permissions and JMX URL config.

    The Datadog…[Read more]

  • Profile picture of matthewponzio

    matthewponzio started the topic OpenDJ 6.0 – JMX Monitoring in the forum Directory Services 3 years, 4 months ago

    Hi everyone,

    My question here is regarding JMX Monitoring on DJ 6.0. I have a correctly configured JMX Handler, WITH the appropriate permissions. We are using Datadog Agent v6 to collect JMX monitoring statistics. The DD agent is correctly configured, with correct permission and can see the JMX Mbeans – as such:

    # datadog-agent jmx list…[Read more]

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6: Monitoring the backend in the forum Directory Services 3 years, 4 months ago

    And Dom…thanks for getting that KB article updated so fast! Looks perfect! Cheers.

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6: Monitoring the backend in the forum Directory Services 3 years, 5 months ago

    Oh…just saw in my email…Got a message from Dom Reed. For some reason he didn’t post here. Here is his message:

    Hi Matthew

    Thank you for your feedback. You are correct, this has changed in DS 6. Appologies this was missed when I updated articles for DS 6 – I have updated it now and republished. I will also update any related articles.

    Many…

    [Read more]

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6: Monitoring the backend in the forum Directory Services 3 years, 5 months ago

    Hey, thanks for the reply, but I’m not sure I follow. Read privileges to the monitoring data doesn’t seem to be the problem. I’m not getting any kind of access denied error. The problem is that the baseDN changed from “cn=userRoot Backend,cn=monitor” to “ds-cfg-backend-id=userRoot,cn=backends,cn=monitor”.

  • Profile picture of matthewponzio

    matthewponzio replied to the topic OpenDJ 6: Monitoring the backend in the forum Directory Services 3 years, 5 months ago

    Bad copy/paste for the original DJ 3.5 ldapsearch command at the top of my post…

    It should be:
    ldapsearch -h <hostname> -p <port> -D "cn=Directory Manager" -w <password> -b "cn=userRoot Backend,cn=monitor" -s sub "(objectClass=*)"

  • Profile picture of matthewponzio

    matthewponzio started the topic OpenDJ 6: Monitoring the backend in the forum Directory Services 3 years, 5 months ago

    Hi,

    Did a cursory search of the topics, but didn’t find anything on this. Our FR env build is done via automation and one our steps is to check if the DJ backend is online. We were on DJ 3.5 where the command was:

    ldapsearch -h <hostname> -p <port> -D "cn=Directory Manager" -w <password> -b "cn=ssousers Backend,cn=monitor" -s sub…[Read more]

  • Profile picture of matthewponzio

    matthewponzio replied to the topic JMX Monitoring of OpenDJ Replication in the forum Directory Services 3 years, 6 months ago

    Hi Ludo, thanks so much for the reply. Sorry, totally forgot to include the version…it’s 3.5. I’m hopeful that we will be able to be upgrade to 6 sometime fairly soon, so this may be a moot point indeed. I did see the note in the docs that missing_changes was deprecated in v6. Probably not worth pursuing a resolution at this stage then,…[Read more]

  • Profile picture of matthewponzio

    matthewponzio started the topic JMX Monitoring of OpenDJ Replication in the forum Directory Services 3 years, 6 months ago

    Hi all,

    We are using JMX to monitor our OpenDJ environment, including replication. We are seeing a discrepancy between what the JMX Mbean is reporting for missing_changes (jmx.org.opends.server.missing_changes) vs what the dsreplication status commands reports.

    Could this be because the JMX Mbean statistic for missing_changes is cumulative?…[Read more]

Profile Photo Jennifer Hughes Profile Photo haritupe

Search the forums

Leaderboard

The leaderboard is based on our rockin' informal points system, read about it here.

Recent blog posts

  • Using an Authentication Tree Stage to Build a Custom UI with the ForgeRock JavaScript SDK February 26, 2020
  • Identity Workflow with AM using Zeebe and Cloud Functions February 19, 2020
  • IDM: Zero Downtime Upgrade Strategy Using a Blue/Green Deployment January 23, 2020
  • DS: Zero Downtime Upgrade Strategy Using a Blue/Green Deployment January 22, 2020
  • AM and IG: Zero Downtime Upgrade Strategy Using a Blue/Green Deployment January 22, 2020
Visit our blog

Recent Topics

  • Handle exception in Node Patch Object
  • SP Initiated SSO – Unable to do sso or federation
  • Realm level access
  • How can I generate 32 bytes Random salt in js script
  • Bypass Login Page in Chain

©2022 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

  • Blog
  • Documentation
    • OpenAM / Access Management
    • OpenDJ / Directory Services
    • OpenIDM / Identity Management
    • OpenIG / Identity Gateway
    • OpenICF / Open Connector Framework
    • Intro to Identity
  • Forums
    • General Discussion
    • ForgeRock Products
      • OpenAM
      • OpenIDM
      • OpenDJ
      • OpenIG
      • OpenUMA
    • DevOps
    • Internet of Things
    • Documentation
    • Groups
  • Twitter
  • Facebook
  • Linkedin
  • Youtube

Log in with your credentials

Lost your password?

Forgot your details?

I remember my details