Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am trying to setup builtin OpenLDAP server in MacOS Mavericks. I managed to configure and start it. I can login with a LDAP client using the root credentials and create new users. My problem is that authentication on those new users is not working. For example, from ldapsearch I get

ldap_bind: Insufficient access (50)

for user uid=admin,ou=People,dc=acme,dc=com I get the following log:

53a320af do_bind: version=3 dn="uid=admin,ou=People,dc=acme,dc=com" method=128
53a320af ==> bdb_bind: dn: uid=admin,ou=People,dc=acme,dc=com
53a320af bdb_dn2entry("uid=admin,ou=people,dc=acme,dc=com")
53a320af => bdb_search
53a320af bdb_dn2entry("cn=kerberoskdc,cn=config,dc=acme,dc=com")
53a320af => bdb_dn2id("cn=config,dc=acme,dc=com")
53a320af <= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30988)
53a320af => access_allowed: disclose access to "dc=acme,dc=com" "entry" requested
53a320af => slap_access_allowed: backend default disclose access granted to "cn=kerberoskdc,cn=config,dc=acme,dc=com"
53a320af => access_allowed: disclose access granted by read(=rscxd)
53a320af send_ldap_result: conn=-1 op=0 p=0
53a320af send_ldap_result: err=10 matched="dc=acme,dc=com" text=""
53a320af Entry *odusers_copy_entry(Operation *): Unable to locate cn=kerberoskdc,cn=config,dc=acme,dc=com (32)
53a320af odusers_copy_krbrealm: No entry associated with KerberosKDC cn=kerberoskdc,cn=config,dc=acme,dc=com
53a320af odusers_krb_auth: could not retrieve krb realm while authing admin
53a320af daemon: activity on 1 descriptor
53a320af daemon: activity on:53a320af 
53a320af daemon: kqueue: listen=8 active_threads=0 tvp=NULL
53a320af daemon: kqueue: listen=9 active_threads=0 tvp=NULL
53a320af int odusers_increment_failedlogin(struct berval *): Unable to retrieve description of loginFailedAttempts attribute53a320af bdb_bind: Error to increment failed login count for uid=admin,ou=people,dc=acme,dc=com53a320af send_ldap_result: conn=1036 op=0 p=3
53a320af send_ldap_result: err=50 matched="" text=""
53a320af send_ldap_response: msgid=1 tag=97 err=50

After some googling I've seen that I may solve the issue by building and installing a Ldap server from scratch, but I need to stick to the version installed as I don't have the build tools installed. Thanks for any workarounds.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.