On 03/31/15 17:47 +0800, rockwang wrote:
access to attrs=userPassword by self write by anonymous auth by dn.base="cn=Manager,dc=abc,dc=com" by * none
access to * by self write by dn.base="cn=Manager,dc=abc,dc=com" by * read by * none
my question is user can't change his own password. I use following command so I have different result.
<img />
when not add -x
<img />
Consult the manpage for ldappasswd. In the first case (simple bind) you did not provide a binddn (-D). In the second case, you directed ldappasswd to perform a SASL bind but did not correctly provide an authentication identity, and the sasl mechanism negotiated could not derive one.
Hint: if using a simple bind, specify a full DN (with -D), and not a uid.