Re: access - some success, some failure

[squeegy+ldap@squeegy.org]

I am still not authenticating properly in Netscape.  It appears the
reason I am getting a search back is that part can be done
anonymously. 

Does the following log info give anyone a clue as to why?

slapd[9560]: conn=37 fd=17 connection from unknown (208.11.81.62) accepted. 
slapd[10031]: conn=37 op=0 BIND dn="" method=128 
slapd[10031]: conn=37 op=0 RESULT err=0 tag=97 nentries=0 
slapd[10032]: conn=37 op=1 SRCH base="DC=AMSITE,DC=COM" scope=2 filter="(mail=JCHIODI@AMSITE.COM)" 
slapd[10032]: conn=37 op=1 RESULT err=0 tag=101 nentries=1 
slapd[10033]: conn=37 op=2 BIND dn="CN=JT CHIODI,OU=EMPLOYEE,DC=AMSITE,DC=COM" method=128 
slapd[10033]: conn=37 op=2 RESULT err=0 tag=97 nentries=0 
slapd[10034]: conn=37 op=3 SRCH base="DC=AMSITE,DC=COM" scope=2 filter="(cn=*AM*)" 
slapd[10034]: conn=37 op=3 RESULT err=0 tag=101 nentries=2 
slapd[9560]: conn=37 op=-1 fd=17 closed errno=104
slapd[10035]: conn=37 op=4 UNBIND 
 
> squeegy+ldap@squeegy.org wrote:
> 
> > When I get my search results back from Netscape, I select a
> > record to display it fully and I get "Not found" from Netscape.
> > Why am I getting search results but can't display the entire record?
> > When I do a search with ldapsearch, i am getting the entire record.
> 
> I use the same directives in slapd.conf (whithout uid attribut) but nothing's
> good:
>         I can't use ldapsearch
>         I can't use Netscape Adress book:
> "Mail id invalid or not unique, cannot resolve to directory authorization entry."
> 
> what's wrong?
> UID is really important? i must add this attribut for all entries? Is there
> another solution?
> 
> > slapd.cof - access section
> > ##########################################################################
> >
> > access to attr=owner
> >         by dnattr=owner write
> >         by * read
> >
> > access to attr=entry
> >         by self write
> >         by dnattr=owner write
> >         by dn=".+" read
> >         by * read
> >
> > access to attr=cn,givenName,sn,uid,mail
> >         by self write
> >         by dnattr=owner write
> >         by dn=".+" read
> >         by * search
> >
> > access to attr=userpassword
> >         by self write
> >         by dnattr=owner write
> >         by * none
> >
> > access to *
> >         by self write
> >         by dnattr=owner write
> >         by dn=".+" read
> >         by * none
> >
> > index cn,sn,uid,mail
> > index objectclass pres,eq
> > index default none
> >
> 
> --
> LAMOTHE Oswaldo                         +336.10.43.20.96
> Eleve Ingenieur-Maitre                  lamothe@ifrance.com
> 
> Systemes de Telecommunications          133,Bld Deodat de Severac
> et Reseaux Informatiques                31300 TOULOUSE
> 
> 
> 



___________________

Jt "The Squeegy" Chiodi

http://www.squeegy.org/
squeegy@squeegy.org