Re: can't chang ldap user passwd by self

[Dan White <dwhite@cafedemocracy.org>]

On 03/31/15 17:47 +0800, rockwang wrote:
>  access to attrs=userPassword
>  by self write
>  by anonymous auth
>  by dn.base="cn=Manager,dc=abc,dc=com"
>  by *  none
>
>  access to *
>              by self write
>              by dn.base="cn=Manager,dc=abc,dc=com"
>              by * read
>              by * none
>
> my question is user can't change his own password. I use following command
> so I have different result.
<img />
> when not add -x
<img />

Consult the manpage for ldappasswd. In the first case (simple bind) you did
not provide a binddn (-D). In the second case, you directed ldappasswd to
perform a SASL bind but did not correctly provide an authentication
identity, and the sasl mechanism negotiated could not derive one.

Hint: if using a simple bind, specify a full DN (with -D), and not a
uid.

--
Dan White