Sam Varshavchik <[EMAIL PROTECTED]> writes:

> Lloyd Zusman writes:
>
>> Sam Varshavchik <[EMAIL PROTECTED]> writes:
>>
>>> Lloyd Zusman writes:
>>>
>>>> And finally, the LDAP_BINDDN and LDAP_BINDPW values are indeed set
>>>> properly in authldaprc.
>>>> Is there some sort of authldap configuration option that's necessary
>>>> in order for auth_passwd() to function properly?  Or ... ???
>>>
>>> No.  I would suggest setting DEBUG_LOGIN=2 in authdaemond, and see what
>>> gets logged.  Although there are no debug messages in the code, at the
>>> moment, that log what happens during a password change attempt, at least
>>> you'll be logging what happens during authentication.
>> Thanks.  OK I did that, and when I made the password change attempt, I
>> got this error in syslog:
>>   Jan 16 16:59:51 authdaemond: LDAP modify failed: Insufficient access
>> Everything else that came prior to that was the logging of a successful
>> operation.
>> Does anyone know what I have to do in order to give
>> authdaemond/authldap
>> sufficient access to modify the database?
>
> This looks like access controls on your LDAP server.  You need to tell
> your LDAP server that this client is allowed to change the password
> field.
>
> You're all set on the Courier side.  You need to fix up the LDAP server
> side.

Other clients can change the password field just fine.  For example, I
successfully use phpldapadmin to maintain all fields within the
database, including the password.

I didn't have to do anything special in slapd.conf in order for
phpldapadmin to have this capability.

Can anyone tell me what I have to do in slapd.conf (or anywhere else) in
order to tell my LDAP server that the authldap client is allowed to
change the password field ... and preferably, in a way that will not
subsequently break phpldapadmin?

-- 
 Lloyd Zusman
 [EMAIL PROTECTED]
 God bless you.



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to