[Date Prev][Date Next] [Chronological] [Thread] [Top]

[Fwd: Re: why i can't add manager account]





-------- Original Message --------
Subject: Re: why i can't add manager account
Date: Fri, 16 May 2003 12:34:59 +0200
From: Kuba Leszewski <k.leszewski@ce3.pl>
To: Kuba Leszewski <k.leszewski@ce3.pl>
References: <3EC38644.50007@ce3.pl>

Kuba Leszewski wrote:

Hi,

slapd.conf:
rootdn "cn=manager,dc=ce3,dc=pl"
rootpw "pass"

/etc/ldap.conf:
host    192.168.254.6
base    "dc=ce3,dc=pl"
binddn  "cn=manager,dc=ce3,dc=pl"

/etc/ldap.secret
pass

Now 2 problems:

I can't add the following entry to my ldap:
dn: cn=manager,dc=ce3,dc=pl
objectclass: top
objectclass: organizationalRole
cn: manager
cn: Manager
cn: admin
description: LDAP Directory Manager

I get:
ldapadd: update failed: cn=manager,dc=ce3,dc=pl
ldap_add: Type or value exists (20)
even though it doesn't exist

OK The problem was that I entered: cn=Manager cn=manager

in the ldif file
now I added this entry but....

What follows this problem is that I can't use nss_ldap! Since i have bindn set to "cn=manager,dc=ce3,dc=pl" in my ldap.conf

What i get in the logs is:
 conn=2 fd=11 ACCEPT from IP=192.168.254.6:44431 (IP=192.168.254.6:389)
 bind: invalid dn ("cn=manager,dc=ce3,dc=pl")
 conn=2 op=0 RESULT tag=97 err=34 text=invalid DN
 conn=2 op=1 UNBIND
 conn=2 fd=11 closed


... I still get this !! so the problem remains

one more thing I noticed:
'strace id username 2>&1 | grep open | grep ldap' shows that it doesn't
open ldap.secret file at all.
how does it get the password then ??

another thing
it tries to open libsasl2.so, but couldn't find it anyway, since i don't
want to use sasl (sasl and openldap seems like a nightmare to me)
does it mean it tries to use sasl-bind, and not simple-bind ?
maybe this is the problem ?


Kuba