Re: Still fighting openldap

m.roth2006@xxxxxxx wrote:

I've tried changing the first stanza to:
access: to attrs=shadowLastChange,userPassword
by * read
by self write
by anonymous auth


Do you get startup errors in your logs? Can you verify that your server is reading these ACLs? You keep adding a colon after access on the first ACL and I'm not sure that it would work -- and in fact, this would explain your "next problem".

Do you see the colon?

You do not need to give access to shadowLastChange to your users, that value is maintained by OpenLDAP.

HTH,
--
Joshua M. Miller - RHCE,VCP

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list