I'm getting this error:
=> access_allowed: read access to
"uid=techsupport,ou=Users,dc=moldex,dc=group" "userPassword"
requested
=> acl_get: [1] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=replicator,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: *
<= acl_mask: [2] applying +0 (break)
<= acl_mask: [2] mask: =0
=> acl_get: [2] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=samba,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=nssldap,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=squid,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: self
<= check a_dn_pat: anonymous
<= acl_mask: [5] applying auth(=xd) (stop)
<= acl_mask: [5] mask: auth(=xd)
=> slap_access_allowed: read access denied by auth(=xd)
=> access_allowed: no more rules
send_search_entry: conn 9 access to attribute userPassword, value #0 not allowed
--- On Sat, 7/26/08, Dieter Kluenter <dieter(a)dkluenter.de> wrote:
From: Dieter Kluenter <dieter(a)dkluenter.de>
Subject: Re: ppolicy pwdReset
To: openldap-software(a)openldap.org
Date: Saturday, July 26, 2008, 3:06 PM
Hi,
greek ordono <grexk(a)yahoo.com> writes:
Hello,
I getting the following error:
"LDAP password information update failed: Insufficient access
Operations are restricted to bind/unbind/abandon/StartTLS/modify
password"
when I try to add pwdReset on users.
Run slapd -d acl
-Dieter
--
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6