ldap_bind: Invalid credentials (49)

[alpnet99@netscape.net]

 I'm new to LDAP and just playing around with it. I'm trying to figure out why ldapsearch fails with the above error when I activate a simple ACL.

# ldapsearch -x -b 'dc=test,dc=com' -D 'mail=Michelle@test.com,ou=michelle,dc=test,dc=com' -w pass123
ldap_bind: Invalid credentials (49)

Here's what the entry looks like:

-----
dn: mail=Michelle@test.com,ou=michelle,dc=test,dc=com
objectClass: top
objectClass: inetOrgPerson
cn: mish
sn: Husain
description: Michelle's Record
mail: Michelle@test.com
title: Analyst
telephoneNumber: 949-889-9900
facsimileTelephoneNumber: 666-777-7777
homePhone: 949-926-7119
o: Test Ltd
userPassword:: cGFzczEyMw==
-----

Here're the ACL lines in my slapd.conf:

-----
suffix          "dc=test, dc=com"
rootdn          "cn=manager,dc=test,dc=com"
rootpw          secret

access to *
        by users read
#       by * read
# uncommenting above line allows ldapsearch to bind OK with 
# the *correct* passwd ??
-----

Thanks for your help!

__________________________________________________________________
Switch to Netscape Internet Service.
As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register

Netscape. Just the Net You Need.

New! Netscape Toolbar for Internet Explorer
Search from anywhere on the Web and block those annoying pop-ups.
Download now at http://channels.netscape.com/ns/search/install.jsp