[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Cannot replicate userPassword?



--On Tuesday, January 01, 2008 7:16 PM +0100 Thomas Kirchtag <tkircht@ipodion.at> wrote:

syncrepl rid=667
      provider=ldaps://ldap.ipodion.at
      type=refreshOnly
      interval=01:00:00:00
      searchbase="dc=int,dc=ipodion,dc=at"
      scope=sub
      schemachecking=on
      bindmethod=simple
      binddn="cn=admin,dc=ipodion,dc=at"
      credentials=<secret>
access to attrs=userPassword
        by dn="cn=admin,dc=int,dc=ipodion,dc=at" write
        by anonymous auth
        by self write
        by * none


Seems clear to me. It can't write it. Note that the identity that can write is:

by dn="cn=admin,dc=int,dc=ipodion,dc=at" write

but syncrepl is acting as:

binddn="cn=admin,dc=ipodion,dc=at"


--Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration