Hello, I am trying to setup a sync between 2 ldap instance, following the guide here<http://askubuntu.com/questions/360190/how-to-configure-master-sla...;. I ran the command below, but got the following error message. sudo ldapadd -x -W -D cn=admin,dc=acme,dc=come -f /root/enable_sync_prov.ldif Enter LDAP Password: *modifying entry "olcDatabase={1}hdb,cn=config"ldap_modify: Insufficient access (50)* How do i fix the insuffient access problem? I am using the admin that has full write access on ldap.

Hello thanks for your response, On Tue, Mar 11, 2014 at 11:01 AM, Christian Kratzer <ck-lists(a)cksoft.de&gt;wrote: > Hi, > > > On Tue, 11 Mar 2014, Seun Ojedeji wrote: > How do i fix the insuffient access problem? I am using the admin that has > full write access on ldap.

Its a fresh ldap setup and i only have one admin user created (with on personal user) here is the script i used in setting up ldap: http://pastebin.com/JagCtptS

> 1. your openldap version > openldap-2.4.28

> > 2. your full configuration (preferably on pastebin oder such) > Use slapcat -n0 to extract the config > > http://pastebin.com/U6SmeFNC Thanks again for helping out > > Greetings > Christian > > -- > Christian Kratzer CK Software GmbH > Email: ck(a)cksoft.de Wildberger Weg 24/2 > Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden > Fax: +49 7032 893 997 - 9 HRB 245288, Amtsgericht Stuttgart > Mobile: +49 171 1947 843 Geschaeftsfuehrer: Christian Kratzer > Web: http://www.cksoft.de/ >

Hello Christian, Thanks for the pointer. I followed your suggestion and it worked on the provider server. However the customer server is still throwing the same error. Even though i used the a root unix user. Below is the config on the customer side: http://pastebin.com/9zanEh8c sudo ldapadd -Q -Y EXTERNAL -H ldapi:/// -f enable_sync_consumer.ldif modifying entry "cn=config" ldap_modify: Insufficient access (50)

Thanks again Cheers! On Tue, Mar 11, 2014 at 1:28 PM, Christian Kratzer <ck-lists(a)cksoft.de&gt;wrote: > Hi, > > On Tue, 11 Mar 2014, Seun Ojedeji wrote: > > Hello thanks for your response, >> >> On Tue, Mar 11, 2014 at 11:01 AM, Christian Kratzer <ck-lists(a)cksoft.de >>> wrote: >> >> Hi, >>> >>> >>> On Tue, 11 Mar 2014, Seun Ojedeji wrote: >>> How do i fix the insuffient access problem? I am using the admin that has >>> full write access on ldap. >>> >> <snipp/> > > Its a fresh ldap setup and i only have one admin user created (with on >> personal user) here is the script i used in setting up ldap: >> http://pastebin.com/JagCtptS >> > > your acl for cn=config is as follows: > > dn: olcDatabase={0}config,cn=config > objectClass: olcDatabaseConfig > olcDatabase: {0}config > olcAccess: {0}to * by > dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external ,cn=auth > manage by * break > > This only allows the unix root user to manage cn=config. > > The admin user you are using is for managing access to the main directory. > > To manage cn=config in this setup you should use > > ldapadd -Y EXTERNAL -H ldapi:/// > ldapmodify -Y EXTERNAL -H ldapi:/// > > > 1. your openldap version >>> >>> >> openldap-2.4.28 >> > > > Do yourself a favor and upgrade to 2.4.39 before starting with any serious > openldap work. > > You can get upto date rpm and deb packages from > http://ltb-project.org/wiki/ > > Greetings > Christian > > > > >> >> >>> 2. your full configuration (preferably on pastebin oder such) >>> >>> >> Use slapcat -n0 to extract the config >> >>> >>> http://pastebin.com/U6SmeFNC >>> >> >> Thanks again for helping out >> >> >>> Greetings >>> Christian >>> >>> -- >>> Christian Kratzer CK Software GmbH >>> Email: ck(a)cksoft.de Wildberger Weg 24/2 >>> Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden >>> Fax: +49 7032 893 997 - 9 HRB 245288, Amtsgericht Stuttgart >>> Mobile: +49 171 1947 843 Geschaeftsfuehrer: Christian Kratzer >>> Web: http://www.cksoft.de/ >>> >>> >> >> >> >> > -- > Christian Kratzer CK Software GmbH > Email: ck(a)cksoft.de Wildberger Weg 24/2 > Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden > Fax: +49 7032 893 997 - 9 HRB 245288, Amtsgericht Stuttgart > Mobile: +49 171 1947 843 Geschaeftsfuehrer: Christian Kratzer > Web: http://www.cksoft.de/ >

Hello Christian, Thanks, kindly find my response inset On Tue, Mar 11, 2014 at 4:36 PM, Christian Kratzer <ck-lists(a)cksoft.de&gt;wrote: > Hi, > > On Tue, 11 Mar 2014, Seun Ojedeji wrote: > You have three options: > > 1. If you remember the password you have set for cn=admin,cn=config use > that with > > ldapmodify -x -w pass -D cn=admin,cn=config -H ldap://... > > I followed this option, however i keep getting the error below when i tried setting up the customer side: sudo ldapadd -x -w mypass -D cn=admin,cn=config -H ldapi:/// -f enable_sync_consumer.ldif modifying entry "cn=config" modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: No such attribute (16) additional info: modify/delete: olcAccess: no such value Any idea on what i may be doing wrong?

From a quick look at enable_sync_consumer.ldif on the howto you