Re: basic login fails : here are some logs ...

[Chris Jacobs <Chris.Jacobs@apollogrp.edu>]

Phillip,

That's up to your design. I think you already answered your question though: which one works?

- chris

Chris Jacobs, Systems Administrator, Technology Services Group
Apollo Group | Apollo Marketing & Product Development | Aptimus, Inc.
2001 6th Ave | Ste 3200 | Seattle, WA 98121
phone: 206.839-8245 | cell: 206.601.3256 | Fax: 208.441.9661
email:  chris.jacobs@apollogrp.edu

----- Original Message -----
From: openldap-technical-bounces@OpenLDAP.org <openldap-technical-bounces@OpenLDAP.org>
To: Olivier <ldap@guillard.nom.fr>
Cc: openldap-technical@openldap.org <openldap-technical@openldap.org>
Sent: Wed Jul 13 09:34:46 2011
Subject: Re: basic login fails : here are some logs ...

On Wed, 13 Jul 2011, Olivier wrote:
> I have problem to use my openldap 2.4 server for authentication on a
> fedora 14 : it sounds that the problem is on the on the client side
> configuration.
...
> conn=1220 op=1 SRCH base="ou=People,ou=staff,dc=mydomain,dc=fr"
> scope=2 deref=0 filter="(uid=olivier)"
> conn=1220 op=1 SRCH attr=host authorizedService shadowExpire
> shadowFlag shadowInactive shadowLastChange shadowMax shadowMin
> shadowWarning uidNumber
> conn=1220 op=1 SEARCH RESULT tag=101 err=32 nentries=0 text=

err=32 == LDAP_NO_SUCH_OBJECT  Does ou=People,ou=staff,dc=mydomain,dc=fr
exist?


...
>  dn: uid=olivier,ou=Staff,ou=People,dc=mydomain,dc=fr

Ah: which comes first in the dn: Staff or People?  The good results from
ldapsearch show ou=Staff,ou=People,dc=mydomain,dc=fr while the failing
search is of ou=People,ou=staff,dc=mydomain,dc=fr.


Philip Guenther



This message is private and confidential. If you have received it in error, please notify the sender and remove it from your system.