On a fresh centos7 ldap server

I use a ldif like this

replace: olcRootDN
olcRootDN: dc=Manager,dc=mydomo,dc=mydom
replace: olcAccess
olcAccess: {0}to *
  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" write
  by dn.base="cn=Manager,dc=mydomo,dc=mydom" write by * none
add: olcRootPW

Of course hash is correct

The command go ok but if i try a simple ldap insert..

ldapadd -x -D "dc=Manager,dc=mydomo,dc=mydom" -w mycorrectpass -f init2.ldif

give me

ldap_bind: Invalid credentials (49)

Why? ldap is correct running,i can insert only with ldapi and -Y external the user ldap has correct perms on dirs.

  • "mycorrectpass" looks to be incorrect in the first place.
    – jlliagre
    Feb 6, 2016 at 3:18
  • No,is correct,i have used for hash slappasswd -s mycorrectpass
    – elbarna
    Feb 6, 2016 at 3:19
  • Indeed, I have reproduced the problem with a fresh openldap installation. There is something odd going on.
    – jlliagre
    Feb 7, 2016 at 9:40

1 Answer 1


Solution found, is possible to use the external auth wich use sasl

ldapmodify -Y EXTERNAL -H ldapi:/// -f init2.ldif

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.