Can not add or modify users with RH9

Hi,
I have set up a master and a replica LDAP servers, migrating NIS and SAMBA
users succesfully (I can authenticate on the replica server both Linux and
Samba) on two RH8 servers with openldap 2.1.21. Everything, comprising the
replica, works fine.

I have recompiled and installed Directory Administrator 1.5.1 on an RH9
client machime. I have already read the mail regarding can not add new user.

I have the same problem: while browsing a user is fine, when I try a
modification (e.g., I take user paolo which am I and try to change the
password), I get an error popup: "Error, Cannot modify object class". On the
command line shell that started directory administrator, I can read:

Fetching uid=paolo,ou=People,dc=prisma,dc=com from directory
Entry was modified. Changes follow:
LDAP_MOD_DELETE objectclass
account
LDAP_MOD_ADD objectclass
organizationalPerson
inetOrgPerson
LDAP_MOD_REPLACE givenname
Paolo
LDAP_MOD_REPLACE sn
Marini

Fetching uid=paolo,ou=People,dc=prisma,dc=com from directory
Entry was modified. Changes follow:
LDAP_MOD_DELETE objectclass
account
LDAP_MOD_ADD objectclass
organizationalPerson
inetOrgPerson
LDAP_MOD_REPLACE givenname
Paolo
LDAP_MOD_REPLACE sn
Marini

Somethine similar happens also when adding a new user.

What can I do to get your wonderful (at least, looking at the interface !)
tool working ? Am I alone getting these problems ?


My slapd.conf file looks like this:

# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27 20:00:31
kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/redhat/rfc822-MailMember.schema
include /etc/openldap/schema/redhat/autofs.schema
#include /etc/openldap/schema/redhat/kerberosobject.schema
include /etc/openldap/schema/samba.schema

pidfile /var/run/slapd.pid
#argsfile /var/run/slapd.args

loglevel 256

# Allow LDAPv2 client connections. This is NOT the default.
allow bind_v2

# Create a replication log in /var/lib/ldap for use by slurpd.
replogfile /var/lib/ldap/master-slapd.replog

TLSCipherSuite HIGH
TLSCACertificateFile /etc/openldap/cacert.pem
TLSCertificateFile /etc/openldap/thor-cert.pem
TLSCertificateKeyFile /etc/openldap/thor-key.pem
security tls=128,update_tls=128

access to attrs=userPassword
by self write
by * auth
access to attrs=lmPassword,ntPassword
by self write
by * auth
access to *
by read

#######################################################################
# bdb database definitions
#######################################################################
database bdb
suffix "dc=prisma,dc=com"
rootdn "cn=Manager,dc=prisma,dc=com"
rootpw {SSHA}XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
directory /var/lib/ldap

# Indices to maintain
index cn,uid eq
index uidNumber eq
index gidNumber eq

# Replicas to which we should propagate changes
replica host=steiner.prisma:389
suffix "dc=prisma,dc=com"
binddn "cn=Manager,dc=prisma,dc=com"
credentials=xxxxx
bindmethod=simple
tls=yes

Thank you

Paolo



-------------------------------------------------------
This SF.Net email sponsored by: Parasoft
Error proof Web apps, automate testing & more.
Download & eval WebKing and get a free book.
www.parasoft.com/bulletproofapps1