Re: ACL problem

[Zdenek Styblik <stybla@turnovfree.net>]

Il Neofita wrote:
> Hi

Hello,

> I am new and probably I am facing a very basic error
> 
> I am tring to create an admin for a subset
> 
> I create this ldif
> dn: cn=mmmm,dc=test,dc=xx
> cn: mmmm
> sn: mmmm
> objectClass: person
> objectClass: top
> userPassword: test
> 

If you added it exactly like this-
1] delete dn: cn=mmmm,dc=test,dc=xx
2] use % slappasswd; to generate password HASH
3] add DN again

--- SNIP ---
slappasswd -s test
{SSHA}NG3aoK+L1k9Y0bVpekKkzn1joY/usGdF
--- SNIP ---
--- SNIP ---
dn: cn=mmmm,dc=test,dc=xx
cn: mmmm
sn: mmmm
objectClass: person
objectClass: top
userPassword: {SSHA}NG3aoK+L1k9Y0bVpekKkzn1joY/usGdF
--- SNIP ---

Just a morning loto :)

Regards,
Zdenek

> then on sladp.conf
> 
> ...
> access to dn.subtree="ou=people,dc=test,dc=xx"
>         by dn="cn=mmmm,dc=test,dc=xx" write
>         by * read
> ...
> 
> Restarted ldap
> 
> ldapsearch -x  -D "cn=mmmm,dc=test,dc=xx" -W '(objectclass=*)'
> ldap_bind: Invalid credentials (49)
> 
> What am I do wrong?


-- 
Zdenek Styblik
Net/Linux admin
OS TurnovFree.net
email: stybla@turnovfree.net
jabber: stybla@jabber.turnovfree.net