Re: Bind using a user other than organizationalRole user

[Bjørn Ruberg <bjorn@ruberg.no>]

Marcelo de Moraes Serpa wrote:
> Hello list,
>
> I have a local OpenLDAP server with a couple of users. I'm using it 
> for development purposes, here's the ldif:

[...]

> So far, so good. I can bind with "cn=Manager,dc=site,dc=com" and the 
> 12345678 password (the local server password, setup on slapd.conf).
>
> However, I would like to bind with any user in under the people OU. In 
> this case, I'd like to bind with:
>   dn: uid=celoserpa, ou=people, dc=site, dc=com
>   userPassword: secret_12345

And you are completely sure that this entry exists in the LDAP database, 
and that the userPassword attribute has a value? Use slapcat to see 
what's in the backend database.

> But I'm getting a (49) - Invalid Credentials error everytime. I have 
> tried through CLI tools (such as ldapadd, ldapwhoami, etc) and also 
> ruby/ldap. The bind with these credentials fails with a invalid 
> credentials error.

Please show the list how you use those tools.

> I was suspecting that maybe OpenLDAP doesn't compare against userPassword?

I don't think that's very likely...

> Or maybe some ACL configuration I am missing that is somehow affecting 
> the read access to userPassword for the specific DN.

If you suspect your ACLs, you should show them to the list for evaluation.

--
Bjørn