Still fighting openldap

Ok. ACL:
access: to attrs=shadowLastChange,userPassword
by self write
by anonymous auth

access to *
by * read
by anonymous auth

I left the shadowLastChange, hoping that it would fix at least one problem, but no joy: I can log onto other servers with my new password... but not into the ldap server - it still wants my old password, and I, as a user, am not in either /etc/password or /etc/shadow.

Next problem: I've got another user trying to change their password, and they keep getting an insufficient access (50).

Any clues? (Still 2.3.39, RHEL 4)

mark

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: Still fighting openldap
    ... ACL: ... thinking that it had to have anon authority to read, in order to find the user/password, but that only changes the error to invalid credentials ...
    (RedHat)
  • Re: A little more on openLDAP
    ... Josh Miller wrote: ... shadowLastChange is an internal attribute and should NOT appear in your ACL. ...
    (RedHat)
  • Re: openLDAP and user passwords
    ... Harry Hoffman wrote: ... ok, I'll try that manana. ...
    (RedHat)