James Peter Gregory <[EMAIL PROTECTED]> writes:

> Dec 11 15:33:37 beast ftpd[3647]: pam_ldap: error trying to bind as user
> "uid=james,ou=People,dc=beast,dc=com" (Invalid credentials)
> Dec 11 15:33:37 beast ftpd[3647]: FTP LOGIN FROM localhost.localdomain
> [127.0.0.1], james
> 
> now, it appears that uid=james... is an invalid login to ldap for whatever
> reason. However, I currently have defaultaccess as write, with no other
> access controls in slapd.conf. Furhtermore if I do
> 
> ldapsearch -v -W -x -b 'uid=james,ou=People,dc=beast,dc=com'
> '(objectclass=*)'
> 
> with absolutely any password it will retrieve the correct information
> (though I don't intend to keep 100% open access priveledges)

  Try using -D followed by the dn for binding. You'll almost certainly
find that it will fail. The defaultaccess isn't used if you try to
bind with invalid credentials, because the bind failed. The fact that
you don't actually /need/ to bind at all with your current config is a
totally separate issue.

m.


-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://slug.org.au/lists/listinfo/slug

Reply via email to