Re: Postmaster account creation problem

Massimiliano Ferrero wrote:
> But I still get the same error on account creation with a domain postmaster
> 
> Could this be ldap related? ACLs?

Ok, I fixed it
It was an ldap ACL problem
Sorry to have bothered the list

This was the cause:

in /ect/ldap/slapd.conf I had the following

access to attribute=userPassword
         by dn="cn=greatcucumber,dc=midhgard,dc=it" write
         by anonymous auth
         by self write
         by * none

access to dn=".*,jvd=([^,]+),o=hosting,dc=midhgard,dc=it"
         attr=userPassword
         by self write
         by 
group/jammPostmaster/roleOccupant="cn=postmaster,jvd=$1,o=hosting,dc=midhgard,dc=it" 
write
         by anonymous auth
         by * none

access to dn=".*jvd=([^,]+),o=hosting,dc=midhgard,dc=it"
         by self write
         by 
group/jammPostmaster/roleOccupant="cn=postmaster,jvd=$1,o=hosting,dc=midhgard,dc=it" 
write
         by * read

In this order.

The culprit was the first entry (which I need for PAM/ldap unix accounts)
I moved it after the two jamm ACLs and everything now works fine.

I nailed it down putting up trace in ldap to 255.

Thanks anyway for the support :)

Massimiliano

-- 

Massimiliano Ferrero
Midhgard s.r.l.
C/so Re Umberto 23
10128 - Torino
tel. +39-0112301400 - fax +39-0112301422
e-mail: [email protected]
sito web: http://www.midhgard.it


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/