I'm trying to get OpenLDAP up and running on Fedora (12) using the cn=config-based configuration.
I've changed /etc/openldap/slapd.d/cn=config/oldCatabase={1}bdb.ldif to point to my domain:
olcSuffix: dc=endoframe,dc=net olcRootDN: cn=Manager,dc=endoframe,dc=net
And I've added:
olcRootPW: [slappasswd output]
However, I haven't had any luck using this password:
# ldapadd -x -D "cn=Manager,dc=endoframe,dc=net" -W -f Manager.ldif Enter LDAP Password: ldap_bind: Invalid credentials (49)
Is there some other way I should be specifying the password?
Hi, with slappasswd you can specify different password hash types. Try another one. If that still doesn't work, check if your slapd is able to "decrypt" that sort of hash. Is the crypt/md5/etc. algorithm implemented in your slapd binary/library? Did you compile your binary for yourself or did you use the one from your distribution?
Bye.
On Tue, Jun 22, 2010 at 06:22, Braden McDaniel braden@endoframe.com wrote:
I'm trying to get OpenLDAP up and running on Fedora (12) using the cn=config-based configuration.
I've changed /etc/openldap/slapd.d/cn=config/oldCatabase={1}bdb.ldif to point to my domain:
olcSuffix: dc=endoframe,dc=net olcRootDN: cn=Manager,dc=endoframe,dc=net
And I've added:
olcRootPW: [slappasswd output]
However, I haven't had any luck using this password:
# ldapadd -x -D "cn=Manager,dc=endoframe,dc=net" -W -f Manager.ldif Enter LDAP Password: ldap_bind: Invalid credentials (49)
Is there some other way I should be specifying the password?
-- Braden McDaniel braden@endoframe.com
On Tue, 2010-06-22 at 17:04 +0200, Benjamin Griese wrote:
Hi, with slappasswd you can specify different password hash types. Try another one. If that still doesn't work, check if your slapd is able to "decrypt" that sort of hash. Is the crypt/md5/etc. algorithm implemented in your slapd binary/library? Did you compile your binary for yourself or did you use the one from your distribution?
It's installed from Fedora 12 packages.
Should at least cleartext work for olcRootPW? Because not even that is working.
openldap-technical@openldap.org