[prev in list] [next in list] [prev in thread] [next in thread] 

List:       pamldap
Subject:    Re: [pamldap] Anyone using directory_administrator?
From:       KSmith () barton ! ca
Date:       2004-01-16 0:13:35
Message-ID: OFC0085A6E.4C3E9089-ON88256E1D.000123C0-88256E1D.00013F51 () bartoninsurance ! com
[Download RAW message or body]


Eric,
      I am using directory administrator and, with the exception of it
using the old Samba schema, I am having no problems whatsoever.

      I am running the ldap on RedHat 8 and 9 and these are the schemas
that I am using with it.

include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/corba.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/misc.schema
include         /etc/openldap/schema/redhat/autofs.schema
include         /etc/openldap/schema/redhat/kerberosobject.schema
include         /etc/openldap/schema/redhat/samba.schema.samba3
include         /etc/openldap/schema/redhat/samba.schema


Ken Smith

"Yesterday it worked.  Today it is not working.  Windows is like that."



                                                                                      \
                
                      Eric.Sammons@frit                                               \
                
                      .frb.org                 To:       \
                openldap-software@OpenLDAP.org, pamldap@padl.com                      \
                
                      Sent by:                 cc:                                    \
                
                      owner-pamldap@pad        Subject:  [pamldap] Anyone using \
                directory_administrator?                               
                      l.com                                                           \
                
                                                                                      \
                
                                                                                      \
                
                      01/15/2004 11:53                                                \
                
                      AM                                                              \
                
                                                                                      \
                
                                                                                      \






I have implemented directory_administrator and after adding the allow
bind_v2 entry to my configuration file I am now able to use the tool.
However, when I attempt to modify a user I of course make my changes and
select OK.  At this point I receive an error:

Error:  Cannot Modify object class.

In the console I receive the following:

LDAP_MOD_DELTE objectclass
        account
LDAP_MOD_ADD objectclass
        organizationalPerson
        inetOrgPerson

Any ideas where to look or what might be causing this?

This is my slapd.conf, at least the part that matters as I already know the
connection is working....

include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/ns-pwd-policy.schema

pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args

access to dn=".*,dc=frb,dc=org" attr=shadowLastChange
        by dn="cn=Manager,dc=frb,dc=org" write
        by self write
        by * read
access to dn=".*,dc=frb,dc=org" attr=userPassword
        by dn="cn=Manager,dc=frb,dc=org" write
        by self write
        by * read
access to dn=".*,dc=frb,dc=org"
        by self write
        by users auth
        by * read


And to eliminate what will likely be the most popular answer, I have posted
this question to the Directory_Administrator email list as well.   I am
simply hoping that someone, anyone has seen this before and knows how to
fix it.

Thanks!
Eric Sammons
(804)697-3925
FRIT - Unix Systems


[prev in list] [next in list] [prev in thread] [next in thread]