Re: ldap_bind: Invalid credentials (49)

To: wforumw@gmail.com

Subject: Re: ldap_bind: Invalid credentials (49)

From: Vikas Parashar <para.vikas@gmail.com>

Date: Fri, 24 Jan 2014 22:52:43 +0530

Cc: Joshua Schaeffer <jschaeffer0922@gmail.com>, openldap-technical@openldap.org, Dan White <dwhite@olp.net>

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=oMgMIWHyXOBWaqJtI69+VXL54jITLwel7skCe7rY4uo=; b=xlqfu4esZcDTcb68AvtMX1LITKkfzCleS2Bsqph7I1qlze+803uO7d3GoORwZ0CibJ VmdDVIJAHl+asXugIOEtGQeb+VzKQTR2PwDqLOGsH3RBTcvpVsPO3mv4PpLVdjBuueCR 0St2SVZgWIZPf2vn7HFlYGJAh7gkd09ont+yNl9BvP8AGBtPTPIb6GWIBDpzcqPgOHTP GjjCx2lNZTF45Qlpq+IK1jf6ZIo9DrvesJ3FAVfu2PcqefJb37QyfH7VxqoREKS83F3H qPi1AoNTJ3HzHFjIwt7nrzkfJpKrhmpTNRXFj6o+kGvmm7LIP1baKiAVrkLXW4A3S3Am Glmg==

In-reply-to: <52E248BF.2010300@gmail.com>

References: <52E14AE0.2040202@gmail.com> <20140123171955.GA6769@dan.olp.net> <CAFNRWC4hWkzaYeoE+=2V5Tjepq=JReccgN+DfCMquvB-smM2kg@mail.gmail.com> <52E248BF.2010300@gmail.com>

Hi Buddy,

That's divide into two parts:-

One for the BDB databases and another one for configuration database.

In this command

ldapadd -Y external -H ldapi:/// -f /tmp/cn\=samba.ldif

Please try to understand -Y behavior from man pages.

On Fri, Jan 24, 2014 at 4:34 PM, W Forum W <wforumw@gmail.com> wrote:

Hi,

I have already a cn=admin,dc=example,dc=com to add/modify my users/groups in ldap.
And I don't have a olcAuthzRegexp configured
But I could add the samba.schema in my ldap server with
ldapadd -Y external -H ldapi:/// -f /tmp/cn\=samba.ldif

No password was asked? Is this normal?

Thanks!!

On 01/24/2014 12:12 AM, Joshua Schaeffer wrote:

Debian Wheezy's package does include sasl external auth by default, so you should be able to use Dan's suggestion. Also you can run dpkg-reconfigure slapd to set an admin account (cn=admin,dc=example,dc=com) and a password for your bdb or hdb database. However you wouldn't want to use that account anyway to add a schema as that needs to be added to the cn=schema,cn=config directory.

On Thu, Jan 23, 2014 at 10:19 AM, Dan White <dwhite@olp.net> wrote:

On 01/23/14 18:01 +0100, W Forum W wrote:

Hi,
I try to add the samba.schema in my openldap server (Debian Wheezy),
default installed.
slapd: 2.4.31
ldap-utils 2.4.31

I followed this tutorial
https://help.ubuntu.com/10.04/serverguide/samba-ldap.html

I can use ldapsearch, ldapadd and ldapmodify with my
cn=admin,dc=example,dc=com password
but when I try to add the new schema to the directory with

ldapadd -x -D cn=admin,cn=config -W -f /tmp/cn\=samba.ldif

I get
ldap_bind: Invalid credentials (49)

Is there a different password for cn=admin,cn=config? I was never asked
to create it.
And how can I change it if necessary?

Use 'slapcat -n0' to view your existing configuration. You may have an
olcAuthzRegexp configured to allow sasl external authentication over your
ldapi unix socket. If so, try:

ldapadd -Y external -H ldapi:/// -f /tmp/cn\=samba.ldif

--
Dan White