slapd.conf files

["Michael Luevane" <mikel@quantecllc.com>]

Hello, all

I've changed my slapd.conf file and now slapd doesn't start and I get the
following in the /var/log/syslog:
/usr/local/etc/openldap/slapd.conf: line62: rootpw can only be set when
rootdn is under suffix

Help? :)

My slapd.conf files is:

# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.2 2002/08/19
16:21:49 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
#include                %SYSCONFDIR%/schema/core.schema
include                 /usr/local/etc/schema/core.schema
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
# referral      ldap://root.openldap.org

# Define global ACLs to disable default read access.

pidfile         %LOCALSTATEDIR%/slapd.pid
argsfile        %LOCALSTATEDIR%/slapd.args


# Backend definitions
backend bdb

# Load dynamic backend modules:
# modulepath    %MODULEDIR%
# moduleload    back_bdb.la
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la

#
# Sample access control policy:
#       Allow read access of root DSE
#       Allow self write access
#       Allow authenticated users read access
#       Allow anonymous users to authenticate
# Directives needed to implement policy:
#access to dn.base="" by * read
#access to *
#       by self write
#       by users read
#       by anonymous auth
#
# if no access controls are present, the default policy is:
#       Allow read by all
#
# rootdn can always write!

#######################################################################
# ldbm database definitions
#######################################################################

database        bdb
suffix          "o=quantec"
suffix          "dc=qServer,dc=quantecllc,dc=com"
#suffix         "dc=quantecllc,dc=com"

rootdn          "cn=root,dc=quantecllc,dc=com"
#rootdn         "cn=Master,dc=quantecllc,dc=com"

# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          secret
#rootpw         {SSHA}M9hR2POZfoL5eqGpNIy2QAhNqa6m/f4M

# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory       /usr/local/var/openldap-data
# Indices to maintain
#index  objectClass     eq
index   opbjectClass,uid/uidNumber,gidNumber    eq
index   cn,mail,surname,givenname               eq,subinitial

access to attr=userPassword
        by self write
        by dn="cn=root,dc=quantecllc,dc=com" write
        by * none

access to *
        by self write
        by dn="cn=root,dc=quantecllc,dc=com" write
        by * read