Re: ACL problem with version 2.0.23

[Pierangelo Masarati <masarati@aero.polimi.it>]

"Dale, Warren" wrote:
> 
> People,
> 
> I am belatedly upgrading from version 1.2.9 to version 2.0.23.
> I am using Solaris 8.
> I am having problems with my ACL specifications.
> 
> Here are the relevant lines from slapd.conf:
> 36  access to attr=userPassword
> 37      by dn="uid=Replicator,ou=Special Users,o=OzEmail,c=au" write
> 38      by dn="uid=Infranet,ou=Special Users,o=OzEmail,c=au" read
> 
> I started slapd with "-d 32767".
> Listed below are two extracts from the output.
> 
> In lines 2-5 the ACL appears to have been accepted.
> In lines 9-41 we see the results, with the failure on line 41.
> 
> Note particularly lines 35-39.
> In lines 35-37 the DN's appear to match.
> But they do not because "string" is empty. (Line 38). Why?
> 
> What have I done wrong?

you need

	by anonymous auth
or
	by * auth

to bind, e.g.

36  access to attr=userPassword
37      by dn="uid=Replicator,ou=Special Users,o=OzEmail,c=au" write
38      by dn="uid=Infranet,ou=Special Users,o=OzEmail,c=au" read
39      by * auth

-- 
Dr. Pierangelo Masarati               | voice: +39 02 2399 8309
Dip. Ing. Aerospaziale                | fax:   +39 02 2399 8334
Politecnico di Milano                 |
mailto:pierangelo.masarati@polimi.it
via La Masa 34, 20156 Milano, Italy   |
http://www.aero.polimi.it/~masarati