RE: Insufficient access ??

["De Leeuw guy" <G.De_Leeuw@eurofer.be>]

Effectivly, I correct the entry in the slapd.conf, and it's work fine.

Many thak's

Guy

-----Original Message-----
From: Patrick Timmons [mailto:ptimmons@courriel.polymtl.ca]
Sent: Tuesday, October 24, 2000 6:28 PM
To: De Leeuw guy
Subject: Re: Insufficient access ??


I'm not sure with this one but I think I remember that the DNs in your acl
should be coded without xtra spaces like

access to attr=userPassword
 by dn="cn=De Leeuw Guy,br=Internal,o=Eurofer,c=be" write
                        ^           ^         ^
You might want to try this.

De Leeuw guy wrote:
>
> Always the same : LDAP Browser/Editor v2.8
>         Host = ldap.eurofer.be
>         Base Dn = o=Eurofer, c=be
>         User DN = cn=De Leeuw Guy, br=Internal, o=Eurofer, c=be
>         Password = myPaswd
>
> I can read all database except the userPassword attribute (except my
> userPassword) : this is correct.
> but I cannot update any entry
> (I have openldap 2.0.4)
>
> Guy
>
> -----Original Message-----
> From: Jim Hud [mailto:jdhz@btinternet.com]
> Sent: Tuesday, October 24, 2000 10:58 AM
> To: De Leeuw guy
> Subject: Re: Insufficient access ?? (CORRECTION)
>
> I am not sure but try:
>
> access to attr=userPassword
> by dn="cn=De Leeuw Guy, br=Internal, o=Eurofer, c=be" write
> by self write
> by anonymous auth
> by * none
>
> access to *
>     by dn="cn=De Leeuw Guy, br=Internal, o=Eurofer, c=be" write
>     by self write
>     by * read
>
> ----- Original Message -----
> From: "De Leeuw guy" <G.De_Leeuw@eurofer.be>
> To: <openldap-software@OpenLDAP.org>
> Sent: Tuesday, October 24, 2000 9:48 AM
> Subject: Insufficient access ?? (CORRECTION)
>
> > Hi all,
> >
> > Here is the acl extract of my slapd.conf :
> > ==========================================
> > # Define global ACLs to disable default read access.
> > defaultaccess none
> >
> > access to attr=userPassword
> > by self write
> > by anonymous auth
> > by * none
> >
> > access to *
> >     by dn="cn=De Leeuw Guy, br=Internal, o=Eurofer, c=be" write
> >     by self write
> >     by * read
> > =========================================
> >
> > when I'm connected with the dn="cn=De Leeuw Guy, br=Internal, o=Eurofer,
> > c=be"
> > it's impossible to create or modify an entry.
> > Why ?
> >
> > Thank's in advance
> >
> > Guy
> >
> >

--
Patrick Timmons, service informatique