forked from terrycain/389ds_exporter
It listens on port 9496 by default
Started out as just a replication status exporter, and evolved to export more FreeIPA related objects.
Is my first stab at go, it works but it could be better and I hope to improve it. The main thing is that it has a loop that hits LDAP and performs the queries, it doesn't query LDAP when /metrics is queried. What I want is to query LDAP when /metrics is hit and then cache for a period of time (incase multiple prometheus are running).
To run:
./389ds_exporter [flags]./389ds_exporter --help-interval: Scrape interval (default 1m0s)-ipa-domain: FreeIPA domain e.g. example.org-ldap.addr: Address of 389ds server (default "localhost:389")-ldap.pass: 389ds Directory Manager password-ldap.user: 389ds Directory Manager user (default "cn=Directory Manager")-log.format: Log format (default or json)-log.level: Log levelversion: Show exporter version-web.listen-address: Bind address for prometheus HTTP metrics server (default ":9496")-web.telemetry-path: Path to expose metrics on (default "/metrics")
| Metric | Meaning | Labels |
|---|---|---|
| ldap_389ds_users | Number of FreeIPA users | active, staged, preserved |
| ldap_389ds_groups | Number of FreeIPA groups | |
| ldap_389ds_hosts | Number of FreeIPA hosts | |
| ldap_389ds_hostgroups | Number of FreeIPA hostgroups | |
| ldap_389ds_hbac_rules | Number of FreeIPA HBAC rules | |
| ldap_389ds_sudo_rules | Number of FreeIPA SUDO rules | |
| ldap_389ds_dns_zones | Number of FreeIPA DNS zones (including forward zones) | |
| ldap_389ds_replication_conflicts | Number of LDAP replication conflicts | |
| ldap_389ds_replication_status | Replication status of peered 389ds nodes (1 good, 0 bad) | server |
| ldap_389ds_scrape_count | Number of successful or unsuccessful scrapes | result |
| ldap_389ds_scrape_duration_seconds | How long the last scrape took |
This repo essentially started off as a clone of the openldap_exporter modified to query some FreeIPA DNs. The openldap_exporter was a great help in getting this started, as was the consul_exporter which served as a great reference on how to package a prometheus exporter.