Home / server / Questions / 754388
Accepted
elbarna
Asked: 2016-02-06 19:02:21 +0800 CST

Ldap on Centos7: why my RootDN doesn't work?

  • 772

On a fresh centos7 ldap server

I use a ldif like this

replace: olcRootDN
olcRootDN: dc=Manager,dc=mydomo,dc=mydom
-
replace: olcAccess
olcAccess: {0}to *
  by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" write
  by dn.base="cn=Manager,dc=mydomo,dc=mydom" write by * none
-
add: olcRootPW
olcRootPW: {SSHA}xXXXXXXXXXXXXXXXXXXXXXXX

Of course hash is correct

The command go ok but if i try a simple ldap insert..

ldapadd -x -D "dc=Manager,dc=mydomo,dc=mydom" -w mycorrectpass -f init2.ldif

give me

ldap_bind: Invalid credentials (49)

Why? ldap is correct running,i can insert only with ldapi and -Y external the user ldap has correct perms on dirs.

openldap

1 Answers

  1. Best Answer

    Solution found, is possible to use the external auth wich use sasl

    ldapmodify -Y EXTERNAL -H ldapi:/// -f init2.ldif
    • 0