RE: User restriction

[Aaron Richton <richton@nbcs.rutgers.edu>]

On Mon, 7 Jun 2010, Stuart Cherrington wrote:

[given]
> dn: cn=access,ou=auth,dc=ldn,dc=sw,dc=com
> objectClass: groupOfNames
> objectClass: top
> cn: access
> member: uid=stuart,ou=people,dc=ldn,dc=sw,dc=com
> member: cn=proxyagent,ou=profile,dc=ldn,dc=sw,dc=com
> member: uid=rpratt,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=jason,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=pstuart,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=pfield,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=nereelot,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=scolebro,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=bpower,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=ihunt,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=emoreton,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=lcable,ou=people,dc=ldn,dc=sw,dc=com
> member: uid=pmurray,ou=people,dc=ldn,dc=sw,dc=com
[running]
> ldapcompare2.4 -v -x -h 10.2.250.15 -D cn=proxyagent,ou=profile,dc=ldn,dc=sw,dc=com -w xxxxxxxx "ou=auth,dc=ldn,dc=sw,dc=com" member:uid=stuart,ou=people,dc=ldn,dc=sw,dc=com
[outputs]
> Compare Result: No such attribute (16)

Yes. Don't compare against "ou=auth,dc=ldn,dc=sw,dc=com", compare against 
"cn=access,ou=auth,dc=ldn,dc=sw,dc=com" in your ldapcompare2.4 command.