[Date Prev][Date Next] [Chronological] [Thread] [Top]

Invalid Credentials when using ldappasswd



Hi all,

I have installed open LDAP utilities on Ubuntu 12.04 via apt-get
install. I have version 2.4.28-1.1ubuntu4 installed. I can connect
successully to the LDAP via phpldapadmin with login
cn=admin,dc=mydomain,dc=net and my administrator password.

I want to create an administrator for the SOGo login with the
following ldif file:
"dn: ou=accounts,dc=domain,dc=net
objectClass: organizationalUnit
ou: accounts

dn: uid=adminsogo,ou=accounts,dc=domain,dc=net
objectClass: top
objectClass: inetOrgPerson
objectClass: person
objectClass: organizationalPerson
uid: adminsogo
cn: SOGo Administrator
mail: sogo@domain.net
sn: Administrator
givenName: SOGAdmin
"

When running ldapadd -f admin.ldif -x -W -D cn=admin,dc=domain,dc=net
and after entering the administrator password (the same I use to
log-in into phpldapadmin), I get:
"adding new entry "ou=accounts,dc=domain,dc=net"

adding new entry "uid=sogadmin,ou=accounts,dc=domain,dc=net"
I assume that everything is OK at this point.

The problem is when I enter:
ldappasswd -h localhost -x -W -D
cn=admin,dc=domain,dc=net,uid=sogadmin,ou=accounts,dc=domain,dc=net -s
newpass

I have to enter the LDAP password and I enter my administrator
password, but always get the output:
"ldap_bind: Invalid credentials (49)"

When doing
"dapsearch -x -h localhost -b "dc=domain,dc=net" -s sub "objectclass=*""
I can see that an object sogadmin is created:
".....
dn: uid=adminsogo,ou=accounts,dc=domain,dc=net
objectClass: top
objectClass: inetOrgPerson
objectClass: person
objectClass: organizationalPerson
uid: adminsogo
cn: SOGo Administrator
mail: sogo@domain.net
sn: Administrator
givenName:: U09HQWRtaW4g

..."

What should I check to get past this "ldap_bind: Invalid credentials
(49)" when trying to ldappasswd of a new user?

I am pretty sure this must be some basic thing, but I am really a
beginner in the LDAP field .. I have spent few days already trying to
solve this and any help will be very appreciated.

Thanks for any ideas in advance.

Regards,
Matej