[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: what is wrong with my permissions?

To: Igor Shmukler <igor.shmukler@gmail.com>
Subject: Re: what is wrong with my permissions?
From: Ferenc Wagner <wferi@niif.hu>
Date: Thu, 19 Mar 2015 13:13:04 +0100
Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
In-reply-to: <CAA1SNA1aVtzJqAYnXZX5YrchgFwFgREE7wyR=PwjKe5AcNYG1g@mail.gmail.com> (Igor Shmukler's message of "Thu, 19 Mar 2015 07:14:14 +0200")
References: <CAA1SNA3S1dySN1BWw7fHv2f21ZU6i4pG0rPWHaJ9LpnuUbYNig@mail.gmail.com> <873851j33t.fsf@lant.ki.iif.hu> <CAA1SNA1aVtzJqAYnXZX5YrchgFwFgREE7wyR=PwjKe5AcNYG1g@mail.gmail.com>
User-agent: Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux)

Igor Shmukler <igor.shmukler@gmail.com> writes:

> $ sudo ldapdelete -Y external -H ldapi:/// cn=john,dc=directory,dc=com
> SASL/EXTERNAL authentication started
> SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
> SASL SSF: 0
> ldap_delete: Insufficient access (50)
>     additional info: no write access to parent
>
> As you suggested, this is not working. Can this work somehow? I would
> rather just cn=config with a password, which I am able to set. LDAPI
> is work too, although not my preferred route.

Add your olcAccess rules to the right database.  Or to the frontend
database.  It's explained in the link I gave you:
http://www.openldap.org/devel/admin/slapdconf2.html#Access%20Control%20Evaluation
-- 
Regards,
Feri.

Follow-Ups:
- Re: what is wrong with my permissions?
  - From: Igor Shmukler <igor.shmukler@gmail.com>

References:
- what is wrong with my permissions?
  - From: Igor Shmukler <igor.shmukler@gmail.com>
- Re: what is wrong with my permissions?
  - From: Ferenc Wagner <wferi@niif.hu>
- Re: what is wrong with my permissions?
  - From: Igor Shmukler <igor.shmukler@gmail.com>

Prev by Date: Re: ppolicy: pwdInHistory attribute
Next by Date: Re: what is wrong with my permissions?
Index(es):
- Chronological
- Thread