10:52 p.m.
Hello,
I getting the following error:
"LDAP password information update failed: Insufficient access
Operations are restricted to bind/unbind/abandon/StartTLS/modify password"
when I try to add pwdReset on users.
LDAP: 2.4.9
SLAPD ACL: http://pastebin.com/m45ad1781
Thanks,
grexk
1:36 a.m.
Hi,
greek ordono <grexk(a)yahoo.com> writes:
Hello,
I getting the following error:
"LDAP password information update failed: Insufficient access
Operations are restricted to bind/unbind/abandon/StartTLS/modify password"
when I try to add pwdReset on users.
Run slapd -d acl
-Dieter
--
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6
1:53 a.m.
I'm getting this error:
=> access_allowed: read access to
"uid=techsupport,ou=Users,dc=moldex,dc=group" "userPassword"
requested
=> acl_get: [1] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=replicator,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: *
<= acl_mask: [2] applying +0 (break)
<= acl_mask: [2] mask: =0
=> acl_get: [2] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=samba,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=nssldap,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=squid,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: self
<= check a_dn_pat: anonymous
<= acl_mask: [5] applying auth(=xd) (stop)
<= acl_mask: [5] mask: auth(=xd)
=> slap_access_allowed: read access denied by auth(=xd)
=> access_allowed: no more rules
send_search_entry: conn 9 access to attribute userPassword, value #0 not allowed
--- On Sat, 7/26/08, Dieter Kluenter <dieter(a)dkluenter.de> wrote:
From: Dieter Kluenter <dieter(a)dkluenter.de>
Subject: Re: ppolicy pwdReset
To: openldap-software(a)openldap.org
Date: Saturday, July 26, 2008, 3:06 PM
Hi,
greek ordono <grexk(a)yahoo.com> writes:
Hello,
I getting the following error:
"LDAP password information update failed: Insufficient access
Operations are restricted to bind/unbind/abandon/StartTLS/modify
password"
when I try to add pwdReset on users.
Run slapd -d acl
-Dieter
--
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6
3:58 a.m.
greek ordono <grexk(a)yahoo.com> writes:
I'm getting this error:
=> access_allowed: read access to
"uid=techsupport,ou=Users,dc=moldex,dc=group" "userPassword" requested
=> acl_get: [1] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=replicator,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: *
<= acl_mask: [2] applying +0 (break)
<= acl_mask: [2] mask: =0
=> acl_get: [2] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=samba,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=nssldap,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=squid,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: self
<= check a_dn_pat: anonymous
<= acl_mask: [5] applying auth(=xd) (stop)
<= acl_mask: [5] mask: auth(=xd)
=> slap_access_allowed: read access denied by auth(=xd)
=> access_allowed: no more rules
send_search_entry: conn 9 access to attribute userPassword, value #0 not allowed
For this search your rule no. 5 is applicable, and this rule disallows
read access to attribute userPassword.
Change your access rules accordingly.
-Dieter
--
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6
6:23 a.m.
On Saturday 26 July 2008 07:52:16 greek ordono wrote:
Hello,
I getting the following error:
"LDAP password information update failed: Insufficient access
Operations are restricted to bind/unbind/abandon/StartTLS/modify password"
when I try to add pwdReset on users.
LDAP: 2.4.9
SLAPD ACL: http://pastebin.com/m45ad1781
You only later mentioned that you were using smbk5pwd. Since you are, please
look at ITS #5569. You should upgrade to 2.4.11. In the changelog for 2.4.11,
you will find:
Fixed slapo-ppolicy modify with internal ops (ITS#5569)
Regards,
Buchan
6:48 p.m.
Thank you very much its working now.
--- On Mon, 7/28/08, Buchan Milne <bgmilne(a)staff.telkomsa.net> wrote:
From: Buchan Milne <bgmilne(a)staff.telkomsa.net>
Subject: Re: ppolicy pwdReset
To: openldap-software(a)openldap.org, grexk(a)yahoo.com
Date: Monday, July 28, 2008, 7:53 PM
On Saturday 26 July 2008 07:52:16 greek ordono wrote:
Hello,
I getting the following error:
"LDAP password information update failed: Insufficient access
Operations are restricted to bind/unbind/abandon/StartTLS/modify
password"
when I try to add pwdReset on users.
LDAP: 2.4.9
SLAPD ACL: http://pastebin.com/m45ad1781
You only later mentioned that you were using smbk5pwd. Since you are, please
look at ITS #5569. You should upgrade to 2.4.11. In the changelog for 2.4.11,
you will find:
Fixed slapo-ppolicy modify with internal ops (ITS#5569)
Regards,
Buchan
4924
days inactive
4927
days old
openldap-software@openldap.org
5 comments
3 participants
participants (3)
-
Buchan Milne -
Dieter Kluenter -
greek ordono