Re: Still fighting openldap

Jim,

Date: Tue, 19 Feb 2008 12:11:10 -0600
From: "Jim Canfield" <jcanfield@xxxxxxxxxxx>
m.roth2006@xxxxxxx wrote:
Following myself up...
Date: Tue, 19 Feb 2008 12:12:13 -0500 (EST)
From: <m.roth2006@xxxxxxx>
<snip>
Try this:

access to dn.base=""
by self write
by * auth

access to attr=userPassword
by self write
by * auth

access to attr=shadowLastChange
by self write
by * read

access to *
by * read
by anonymous auth

No joy. Also, it bitched at me when I restarted slapd, saying that attr was deprecated and undocumented, and that I should use attrs, which I did. I also tried putting in dn.base="ou=People,dc=example,dc=com". Still a 49 (invalid credentials), and that's after I did an ldapmodify to reset my password to an absolutely known value that I tested by logging onto another box.

mark

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list