hello,

I am trying to setup PPs using this guide:
https://tylersguides.com/guides/openldap-password-policy-overlay/

Everything went fine up to adding the OU for the PP:

policyou.ldif:

dn: ou=policies,dc=company,dc=com
objectClass: organizationalUnit
ou: policies

ldapadd -Y EXTERNAL -Q -H ldapi:/// -f policyou.ldif (1)

which results in https://ldapwiki.com/wiki/LDAP_INSUFFICIENT_ACCESS
(with "additional info: no write access to parent")

Now I tried _several_ commands to fix this, then I did:

ldapadd -H ldapi:/// -D cn=admin,cn=config -W -f policyou.ldif (2)

which works. But I have to fix this on the production server now, and
I don't know whether (2) fixed this or some other command.

What could be the problem with (1)?

Previously I used this guide to change the admin password twice:
https://www.digitalocean.com/community/tutorials/how-to-change-account-passwords-on-an-openldap-server

Do I have to set the password for cn=admin,cn=config separately?
If yes, could you suggest a HOWTO?

Many Thanks and Best Regards,
Felix
--
Felix Natter

Reply via email to