Am Wed, 22 Dec 2010 14:46:50 +0100 schrieb "Thomas D. Dahlmann"<domingo(a)domingo.dk>: > Hi > > I'm trying to add ordinary users write access to a specific ou. > > I've googled a lot and haven't really found any useful regarding to > openldap 2.4 (slapd.d format). > > What would be the correct syntax for a ldapmodify command to > accomplish this to the dn: ou=addressbook,dc=example,dc=net ? something like: ldapmodify -D "cn=config" -W -H ldap://some.host dn:olcDatabase={1}hdb,cn=config changetype: modify replace: olcAccess olcAccess: {1} to dn.subtree="ou=addressbook,dc=example,dc=net" by users write by * read - The numbers {1} are fictious, replace with your real values.

> something like: > ldapmodify -D "cn=config" -W -H ldap://some.host > dn:olcDatabase={1}hdb,cn=config > changetype: modify > replace: olcAccess > olcAccess: {1} to dn.subtree="ou=addressbook,dc=example,dc=net" by > users write by * read Gives me this: ldapmodify -D "cn=admin,dc=example,dc=net" -W -H ldap://localhost Enter LDAP Password: dn:olcDatabase={1}hdb,cn=config changetype: modify replace: olcAccess olcAccess: to dn.subtree="ou=addressbook,dc=example,dc=net" by users write by * read modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Insufficient access (50) "cn=admin,dc=example,dc=net" is my root account so I don't see why it shouldn't have access?? /Thomas

> something like: > ldapmodify -D "cn=config" -W -H ldap://some.host > dn:olcDatabase={1}hdb,cn=config > changetype: modify > replace: olcAccess > olcAccess: {1} to dn.subtree="ou=addressbook,dc=example,dc=net" by > users write by * read Gives me this: ldapmodify -D "cn=admin,dc=example,dc=net" -W -H ldap://localhost Enter LDAP Password: dn:olcDatabase={1}hdb,cn=config changetype: modify replace: olcAccess olcAccess: to dn.subtree="ou=addressbook,dc=example,dc=net" by users write by * read modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Insufficient access (50) "cn=admin,dc=example,dc=net" is my root account so I don't see why it shouldn't have access??