Re: (ITS#6270) Conflict between ppolicy (pwdReset flag) and unique overlays

[clem.oudot@gmail.com]

2009/8/24  <michael@stroeder.com>:
> clem.oudot@gmail.com wrote:
>> Full_Name: Clement OUDOT
>> Version: 2.4.16
>> OS: RHEL 5.2
>> URL: ftp://ftp.openldap.org/incoming/
>> Submission from: (NULL) (83.145.72.122)
>>
>> I use both ppolicy and unique overlays.
>>
>> I try to modify the password of an account whose pwdReset attribute is s=
et to
>> TRUE. I get this LDAP error:
>>
>> ldap_modify: Insufficient access (50)
>> =A0 =A0 =A0 =A0 additional info: unique_search failed
>
> Without seeing your configuration one cannot determine wheter you're hitt=
ing
> ITS#6108: "unique overlay and rootdn".
>
> http://www.openldap.org/its/index.cgi/Documentation?id=3D6108;selectid=3D=
6108
>
> Ciao, Michael.


Hello,

I have a rootdn. An extract of my slapd.conf is :

---
database bdb
suffix dc=3Dexample,dc=3Dcom
rootdn cn=3Dmanager,dc=3Dexample,dc=3Dcom
rootpw secret
directory /var/lib/ldap

overlay ppolicy
ppolicy_use_lockout
ppolicy_hash_cleartext

overlay unique
unique_uri ldap:///ou=3Dusers,dc=3Dexample,dc=3Dcom?uid?sub?(objectClass=3D=
inetOrgPerson)
---

Cl=E9ment.