Re: Unable to edit cn=config

[Dan White <dwhite@olp.net>]

On 06/26/13 15:34 -0700, Michael Roth wrote:
> Hello openldap masters,
>
> I have a big issue and I'm praying someone can help me
>
> Am I able to change the ACL so I can edit cn=config to load a module in? If
> so how do I do that?

If you bind as the rootdn, ACL restrictions do not apply. To view your
existing olcRootDN/olcRootPW configuration, do:

slapcat -n0

> When I load changes into LDAP I'm denied.
>
> $ sudo ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f smbkrb5pwd_load.ldif
>
> modifying entry "cn=module{0},cn=config"
>
> ldap_modify: Insufficient access (50)

--
Dan White