1

On a fresh centos7 ldap server

I use a ldif like this

replace: olcRootDN
olcRootDN: dc=Manager,dc=mydomo,dc=mydom
-
replace: olcAccess
olcAccess: {0}to *
  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" write
  by dn.base="cn=Manager,dc=mydomo,dc=mydom" write by * none
-
add: olcRootPW
olcRootPW: {SSHA}xXXXXXXXXXXXXXXXXXXXXXXX

Of course hash is correct

The command go ok but if i try a simple ldap insert..

ldapadd -x -D "dc=Manager,dc=mydomo,dc=mydom" -w mycorrectpass -f init2.ldif

give me

ldap_bind: Invalid credentials (49)

Why? ldap is correct running,i can insert only with ldapi and -Y external the user ldap has correct perms on dirs.

3
  • "mycorrectpass" looks to be incorrect in the first place. – jlliagre Feb 6 '16 at 3:18
  • No,is correct,i have used for hash slappasswd -s mycorrectpass – elbarna Feb 6 '16 at 3:19
  • Indeed, I have reproduced the problem with a fresh openldap installation. There is something odd going on. – jlliagre Feb 7 '16 at 9:40
0

Solution found, is possible to use the external auth wich use sasl

ldapmodify -Y EXTERNAL -H ldapi:/// -f init2.ldif

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.