Re: Small HOWTO about OpenLDAP2, SASL, Kerberos and SSL/TLS

[Turbo Fredriksson <turbo@bayour.com>]

Quoting "Leander Janssen" <leander@spectakel.net>:

> I followed the LDAPv3 howto and most of my LDAP/SASL/Kerberos system is
> working now, many thanks for this very helpfull guide.

Thanx, I'm glad it helped someone :)

> When I try to modify or add entries in the ldap directory I get error
> messages.

[...]

> ldap_add: Insufficient access
>         additional info: no write access to parent

Do you have something like this in your ACL (in the right place)?

access to dn=".*,dc=slaco,dc=net"
        by dn="uid=coen.+\+realm=SLACO.NET" write

> Now I think this is a problem with the ACL (used the one from Turbo's
> howto).

Most likley. As said, I just barely got it working, and the ACL I included
is most likley faulty

-- 
 Turbo     __ _     Debian GNU     Unix _IS_ user friendly - it's just 
 ^^^^^    / /(_)_ __  _   ___  __  selective about who its friends are 
         / / | | '_ \| | | \ \/ /   Debian Certified Linux Developer  
  _ /// / /__| | | | | |_| |>  <  Turbo Fredriksson   turbo@tripnet.se
  \\\/  \____/_|_| |_|\__,_/_/\_\ Stockholm/Sweden