I'm using openldap2.3-2.3.30 with samba-3.0.24-6 and phpldapadmin-0.9.8.3-8 on Debian Etch. Actually it's running on a virtual machine using VMware. I had everything setup and running smoothly. I was testing a script to create users home/data/profiles and set ownership/permissions. Somehow the script changed the ownership of / (and subdirs) to one of the users (but not perms as far as I could tell). I set it back to owner root. I then set the ownership back on everything I know of. Now slapd will not start unless I take out shadowLastChange out of the following acl:

access to attrs=userPassword,shadowLastChange
       by dn="cn=admin,dc=usit,dc=ie" write
       by anonymous auth
       by self write
       by * none

In pdbedit all users come up with:

pdb_get_group_sid: Failed to find Unix account for admin
Primary Group SID:    (NULL SID)

And when I try to access phpldapadmin:


   Error

Fatal error: Cannot read your configuration file "/usr/share/phpldapadmin/config/config.php", its permissions are too strict.

Is there some ownership that's possibly still wrong or did it do something to the database? Scratching my head for a few days now. TIA



-----------------------------------------------------------------

This email message is intended only for the addressee(s) and contains information that may be confidential and/or copyrighted. If you are not the intended recipient please notify the sender by reply email and immediately delete this email. Use, disclosure or reproduction of this email by anyone other than the intended recipient(s) is strictly prohibited. USIT has scanned this email for viruses and dangerous content and believes it to be clean. However,
virus scanning is ultimately the responsibility of the recipient.

-----------------------------------------------------------------

USIT Ireland Ltd. Company No. 377526. Registered Office 19/21 Aston Quay Dublin 
2.

---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.

Reply via email to