kadmin talking to ldapi problem

[Kent Nasveschuk]

Title: kadmin talking to ldapi problem

Hello,
I'm trying to get heimdal work with openldap and having some problems. Here is some info about my system and what I have tried so far:

Fedora Core 5
OpenLDAP 2.3.27
Heimdal 0.7.2

Starting slapd from /usr/local/openldap/etc/openldap:
../../libexec/slapd -h "ldapi:/// ldap:///" -f slapd.conf.klnc -u ldap -d 1
I can see the socket under /usr/local/openldap/var/run/ldapi

I run kadmin -l -c <my krb5.conf file>

I can see kadmin accessing slapd while it's in debug mode (-d 1).

I get:
kadmin: kadm5_create_principal: ldap_add_s: [EMAIL PROTECTED] ([EMAIL PROTECTED],ou=People,o=MY) Insufficient access: no write access to parent

slapd.conf has:
 access to *
 by sockurl="^ldapi:///$" write


So it boils down to this, kadmin connects to ldap but there is a problem writing to the directory. Any suggestion on more things to troubleshoot would be appreciated.

Kent N



<- - - - - - - - - - - - - ->
Kent L. Nasveschuk
Linux Systems Administrator
Fast Search and Transfer, Inc.
www.fastsearch.com