Re: Unable to edit cn=config

On 06/26/13 15:34 -0700, Michael Roth wrote:

Hello openldap masters,

I have a big issue and I'm praying someone can help me

Am I able to change the ACL so I can edit cn=config to load a module in? If so how do I do that?

If you bind as the rootdn, ACL restrictions do not apply. To view your existing olcRootDN/olcRootPW configuration, do:

slapcat -n0

When I load changes into LDAP I'm denied.

$ sudo ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f smbkrb5pwd_load.ldif

modifying entry "cn=module{0},cn=config"

ldap_modify: Insufficient access (50)