Re: userPassword

[Bjørn Ruberg <bjorn@ruberg.no>]

John Nietzsche wrote:
> Dear gentleman,
>
> i have installed and configured a fully environment containg debian,
> openldap, cyrus-sasl and bdb. I am facing a curious problem in my
> environment:
>
> With a ldif file i had inserted a set of user (replacing nis with
> openldap). When i perform a ldapsearch on the tree whe field
> userPassword is not shown (or it was not added when importing with
> ldapadd).
>
> Did anybody already face such scenario? I am losing my hairs ....
>   

Chances are that a rather standard ACL blocks anyone from reading the 
userPassword attribute. Try doing an ldapsearch while authenticated as 
your admin user instead.

Also, the command "slapcat" (run as root or as the openldap user 
account) will give you a complete dump of the database, with no access 
lists filtering out certain information.

Please take the time to read the slapd.conf configuration file, pretty 
much is documented there (including the ACLs).

--
Bjørn