Re: what is wrong with my permissions?

Igor Shmukler igor.shmukler@gmail.com writes:

$ sudo ldapdelete -Y external -H ldapi:/// cn=john,dc=directory,dc=com SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldap_delete: Insufficient access (50) additional info: no write access to parent

As you suggested, this is not working. Can this work somehow? I would rather just cn=config with a password, which I am able to set. LDAPI is work too, although not my preferred route.

Add your olcAccess rules to the right database. Or to the frontend database. It's explained in the link I gave you: http://www.openldap.org/devel/admin/slapdconf2.html#Access%20Control%20Evalu...