[Samba] ldap_modify_s Insufficient access

[Leonardo Fogel]

> ... The only thing that doesn't work is
> "passwd" itself:
> 
> venezuela:/home/tdm # passwd guest
> Changing password for guest.
> Enter login(LDAP) password:
> New password:
> Bad password: a palindrome
> Re-enter new password:
> LDAP password information update failed: Unknown
> error
> 
> Password changed
> venezuela:/home/tdm #
> 
> and in /var/log/messages:
> Jan 28 13:39:47 venezuela passwd[28505]: pam_ldap:
> ldap_modify_s
> Insufficient access
 
> /etc/openldap/slap.conf
> suffix          "dc=tdm-consult,dc=com"
> rootdn          "cn=tdm,dc=tdm-consult,dc=com"
> rootpw          {crypt}...
> 

By default, only the rootdn can change LDAP entries.
In order to change this, you must add the following to
slapd.conf:

access to attrs=userPassword
  by self write
  by anonymous auth
  by * none

access to attrs=lmPassword,ntPassword
  by * none

access to *
  by * read

Let me know if this works, please.
Regards.


_______________________________________________________________________
Busca Yahoo!
O serviço de busca mais completo da Internet. O que você pensar o Yahoo! encontra.
http://br.busca.yahoo.com/