On 31-03-14 12:52, Hallvard Breien Furuseth wrote:
On Mon, 2014-03-31 at 10:43 +0200, Jonas Kellens wrote:

Well actually, this is the entire ACL :
(...)
defaultaccess   none

The defaultaccess keyword disappeared in OpenLDAP 2.1, and 2.4 won't
start with it.  Unless you're using a hacked version of OpenLDAP.
Anyway, that's the default in RE24 for a database which has other
access statements.  And searching also needs "search" access to
search-related items, like the baseDN.  See man slapd.access.

So you get what you're specifying: No access to baseDN of your
search.  Append something like this to access list:

access to * by * search


Hello,

made the change and added the extra line to /etc/openldap/slapd.conf

remove the line with  "defaultaccess   none" !

The output has changed from "32 No Such Object" to "result: 0 Success". Which is a step forward, but still no results.

When I query with cn=Manager, then  the results are shown :

[root@slap01 ]# ldapsearch -x -D 'cn=Manager,dc=mydomain' -b "ou=tbook1,ou=contacten,ou=101001,dc=mydomain" -W
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <ou=tbook1,ou=contacten,ou=101001,dc=mydomain> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# tbook1, contacten, 101001, mydomain
dn: ou=tbook1,ou=contacten,ou=101001,dc=mydomain
ou: tbook1
objectClass: organizationalUnit
objectClass: top

<snip results>

# search result
search: 2
result: 0 Success

# numResponses: 5
# numEntries: 4



But when I query with the user cn=U101001, then there are no results :

[root@slap01 ]# ldapsearch -x -D 'cn=U101001,ou=101001,dc=mydomain' -b "ou=tbook1,ou=contacten,ou=101001,dc=mydomain" -W
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <ou=tbook1,ou=contacten,ou=101001,dc=mydomain> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 0 Success

# numResponses: 1



Can you help me further ?


Thanks,
Jonas.