perl bind to Openldap

[Theodore Knab <tjk@annapolislinux.org>]

I think I have my slapd.conf file configured wrong.

I can not bind to the user account using the clearpassword and uid. 

I can bind to accounts that are defined in the slapd.conf and accounts
where I have manually set the password using the following: 

 ldappasswd -x -v -w secret -S -D "cn=king,dc=mycastle,dc=edu" \
                   "uid=myuser,dc=mycastle,dc=edu" -s mysecret


#check user is ok
:45:33 moe2 slapd[30219]:     filter: (uid=trainer1) 
May  6 15:45:33 moe2 slapd[30219]:     attrs:
May  6 15:45:33 moe2 slapd[30219]:  
May  6 15:45:33 moe2 slapd[30218]: connection_get(31) 
May  6 15:45:33 moe2 slapd[30218]: connection_get(33) 
May  6 15:45:33 moe2 slapd[30224]: ==> ldbm_back_bind: dn:
uid=trainer1,ou=mailaccounts,dc=mycastle,dc=edu 
May  6 15:45:33 moe2 slapd[30224]: send_ldap_result: 48:: 
May  6 15:45:33 moe2 slapd[30218]: connection_get(33) 
May  6 15:45:33 moe2 slapd[30223]: send_ldap_result: 0:: 
May  6 15:45:33 moe2 slapd[30218]: connection_get(33) 
May  6 15:45:35 moe2 slapd[30218]: connection_get(22) 
May  6 15:45:35 moe2 slapd[30220]: SRCH
"ou=mailaccounts,dc=mycastle,dc=edu" 2 0
May  6 15:45:35 moe2 slapd[30220]:     0 0 0 


Does this look right ?

defaultaccess read

#items to index for speed

index cn eq
index mail eq
index givenname eq
index uid eq
index sn eq
index objectClass eq

#access Control list

#prevents users from looking at passwords
access to attr=userpassword,clearpassword,ldappassword
    by anonymous auth
    by self write
    by self read
    by dn="cn=king,dc=mycastle,dc=edu" write 
    by dn="cn=courier,dc=mycastle,dc=edu" read
    by dn="cn=postfix,dc=mycastle,dc=edu" read
    by dn="mail=mailking,ou=mailaccounts,dc=mycastle,dc=edu"  write
    by * none

    #prevents users from viewing emplyeenumber
    access to attr=employeeNumber
    by dn="cn=king,dc=mycastle,dc=edu" write
    by * none

    access to * 
    by dn="cn=king,dc=mycastle,dc=edu" write
    by users read
    by self write
    by * read



-- 
---------------------
Looking forward to the Open-Source version of the Oxford English Dictionary ?
---------------------
Ted Knab