I'm getting this error:
=> access_allowed: read access to "uid=techsupport,ou=Users,dc=moldex,dc=group"
"userPassword" requested
=> acl_get: [1] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=replicator,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: *
<= acl_mask: [2] applying +0 (break)
<= acl_mask: [2] mask: =0
=> acl_get: [2] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry "uid=techsupport,ou=Users,dc=moldex,dc=group",
attr "userPassword" requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=samba,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=nssldap,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: cn=squid,ou=dsa,dc=moldex,dc=group
<= check a_dn_pat: self
<= check a_dn_pat: anonymous
<= acl_mask: [5] applying auth(=xd) (stop)
<= acl_mask: [5] mask: auth(=xd)
=> slap_access_allowed: read access denied by auth(=xd)
=> access_allowed: no more rules
send_search_entry: conn 9 access to attribute userPassword, value #0 not allowed
--- On Sat, 7/26/08, Dieter Kluenter <[EMAIL PROTECTED]> wrote:
From: Dieter Kluenter <[EMAIL PROTECTED]>
Subject: Re: ppolicy pwdReset
To: openldap-software@openldap.org
Date: Saturday, July 26, 2008, 3:06 PM
Hi,
greek ordono <[EMAIL PROTECTED]> writes:
> Hello,
>
> I getting the following error:
> "LDAP password information update failed: Insufficient access
> Operations are restricted to bind/unbind/abandon/StartTLS/modify
password"
>
> when I try to add pwdReset on users.
Run slapd -d acl
-Dieter
--
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6
