RE: PERMISSION DENIED WHEN ADDING NEW USER

"Nathan Sutton" <[email protected]> Tue, 21 Dec 2004 10:02:55 +1100
Newsgroups gmane.network.directoryadmin
Organization Engage IT Pty Ltd
Message-ID <[email protected]>
 

Hi John,

 

This is more than likely access control lists in the SLAPD.CONF file. You
need to connect to the directory with an account that has WRITE permissions.
The root directory account (not the OS root) has write permissions and can
bypass all ACLs in the SLAPD file. Go into the slapd.conf file and check
ROOTDN and ROOTPW details. This is your directory root account. If you do
not know the password that has been put into the SLAPD.CONF file you can use
the slappasswd utility to generate a new password. E.g:

 

Slappasswd -h {SSHA}

 

This will ask for a password, type it in twice. After which SHA password
hash with a seed will be generated. Just rem out the existing ROOTPW line
and replace it with the new password hash. Ie. Just copy it into the file.

 

You will need to restart the slapd daemon, e.g. service ldap restart

 

After that fire up Directory Administrator and reset the connection settings
using the appropriate rootdn and rootpw info. You should then have full
permissions.

 

Cheers,

 

Nathan

.

  _____  

From: [email protected]
[mailto:[email protected]] On Behalf Of Carr,
John Mr.
Sent: Thursday, 9 December 2004 10:59 PM
To: '[email protected]'
Subject: [Directoryadmin-list] PERMISSION DENIED WHEN ADDING NEW USER

 

I have just installed Directory Administrator this morning.  I think it's a
GREAT product by the way.  But I am having a problem when adding a new user.
My profile is setup as with "Search Root=dc=c2web,dc-net" and DN/user id set
the same as defined in slapd.conf.  However, when adding a new user, I get a
permission denied error?

 

The connection itself tests successful and I can view the entire directory
contents.  Any ideas?

 

John L. Carr

GENERAL DYNAMICS NS

HQUSAREUR G3/IMD

C2 Systems Integration

[email protected]