Phillip,
That's up to your design. I think you already answered your question though: which one works?
- chris
Chris Jacobs, Systems Administrator, Technology Services Group Apollo Group | Apollo Marketing & Product Development | Aptimus, Inc. 2001 6th Ave | Ste 3200 | Seattle, WA 98121 phone: 206.839-8245 | cell: 206.601.3256 | Fax: 208.441.9661 email: chris.jacobs@apollogrp.edu
----- Original Message ----- From: openldap-technical-bounces@OpenLDAP.org openldap-technical-bounces@OpenLDAP.org To: Olivier ldap@guillard.nom.fr Cc: openldap-technical@openldap.org openldap-technical@openldap.org Sent: Wed Jul 13 09:34:46 2011 Subject: Re: basic login fails : here are some logs ...
On Wed, 13 Jul 2011, Olivier wrote:
I have problem to use my openldap 2.4 server for authentication on a fedora 14 : it sounds that the problem is on the on the client side configuration.
...
conn=1220 op=1 SRCH base="ou=People,ou=staff,dc=mydomain,dc=fr" scope=2 deref=0 filter="(uid=olivier)" conn=1220 op=1 SRCH attr=host authorizedService shadowExpire shadowFlag shadowInactive shadowLastChange shadowMax shadowMin shadowWarning uidNumber conn=1220 op=1 SEARCH RESULT tag=101 err=32 nentries=0 text=
err=32 == LDAP_NO_SUCH_OBJECT Does ou=People,ou=staff,dc=mydomain,dc=fr exist?
...
dn: uid=olivier,ou=Staff,ou=People,dc=mydomain,dc=fr
Ah: which comes first in the dn: Staff or People? The good results from ldapsearch show ou=Staff,ou=People,dc=mydomain,dc=fr while the failing search is of ou=People,ou=staff,dc=mydomain,dc=fr.
Philip Guenther
This message is private and confidential. If you have received it in error, please notify the sender and remove it from your system.