the problem is that howto you've used is outdated. sockurl= actually
means sockurl.exact=while in the past it ment sockurl.regex= So just
specify match style explicitly and use appropriate pattern.

2006/10/29, Kent Nasveschuk <[EMAIL PROTECTED]>:
Hello,
I'm trying to get heimdal work with openldap and having some problems. Here
is some info about my system and what I have tried so far:

Fedora Core 5
OpenLDAP 2.3.27
Heimdal 0.7.2

Starting slapd from /usr/local/openldap/etc/openldap:
../../libexec/slapd -h "ldapi:/// ldap:///"; -f slapd.conf.klnc -u ldap -d 1
I can see the socket under /usr/local/openldap/var/run/ldapi

I run kadmin -l -c <my krb5.conf file>

I can see kadmin accessing slapd while it's in debug mode (-d 1).

I get:
kadmin: kadm5_create_principal: ldap_add_s: [EMAIL PROTECTED]
([EMAIL PROTECTED],ou=People,o=MY) Insufficient access: no
write access to parent

slapd.conf has:
 access to *
 by sockurl="^ldapi:///$" write


So it boils down to this, kadmin connects to ldap but there is a problem
writing to the directory. Any suggestion on more things to troubleshoot
would be appreciated.

Kent N



<- - - - - - - - - - - - - ->
Kent L. Nasveschuk
Linux Systems Administrator
Fast Search and Transfer, Inc.
www.fastsearch.com






--
Zaar

Reply via email to