Re: binding needs access to userpassword by * compare?

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

At 05:40 PM 10/12/00 +0200, Joeri van Ruth wrote:
>Hi,
>
>I am using openldap 2.04.
>
>My first access rule reads:
>
>        access to attribute=userPassword
>                by self write
>                by * compare
>
>If I change this to
>
>        access to attribute=userPassword
>                by self write
>                by * none
>
>I get
>
>        ldap_bind: Insufficient access
>
>Why?  The FAQ-o-Matic seems to suggests that by * none should work.

The FAQ has not been updated for 2.0.

2.0 requires you grant "auth" access to attributes needed for
authentication and authorization purposes.  See the 2.0 admin
guide...