Thread: ldapadd problem

    #1
  1. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Mar 2004
    Posts
    2
    Rep Power
    0

    ldapadd problem


    hi everbody

    I have install openldap-server & openldap-client from fedora cdrom
    and i want to add some entries

    /usr/bin/ldapadd -x -W -D 'cn=Manager,o=test,c=nl' -f ldif
    Enter LDAP Password:
    ldap_bind: Invalid credentials (49)

    this is what i get

    the file ldif
    -------------------------------
    dn: o=test,c=nl
    o: test
    objectclass: top
    objectclass: organization

    dn: cn=Manager,o=test,c=nl
    objectclass: organizationalRole
    cn: Manager
    ------------------------------------------
    slapd.conf
    =================
    # $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.8 2003/05/24 23:19:14 kurt Exp $
    #
    # See slapd.conf(5) for details on configuration options.
    # This file should NOT be world readable.
    #
    include /etc/openldap/schema/core.schema
    include /etc/openldap/schema/cosine.schema
    include /etc/openldap/schema/inetorgperson.schema
    include /etc/openldap/schema/nis.schema
    include /etc/openldap/schema/samba.schema
    include /etc/openldap/schema/redhat/autofs.schema

    # Allow LDAPv2 client connections. This is NOT the default.
    allow bind_v2

    # Do not enable referrals until AFTER you have a working directory
    # service AND an understanding of referrals.
    #referral ldap://root.openldap.org

    pidfile /var/run/slapd.pid
    #argsfile //var/run/slapd.args

    # Load dynamic backend modules:
    # modulepath /usr/sbin/openldap
    # moduleload back_bdb.la
    # moduleload back_ldap.la
    # moduleload back_ldbm.la
    # moduleload back_passwd.la
    # moduleload back_shell.la

    # The next three lines allow use of TLS for connections using a dummy test
    # certificate, but you should generate a proper certificate by changing to
    # /usr/share/ssl/certs, running "make slapd.pem", and fixing permissions on
    # slapd.pem so that the ldap user or group can read it.
    # TLSCACertificateFile /usr/share/ssl/certs/ca-bundle.crt
    # TLSCertificateFile /usr/share/ssl/certs/slapd.pem
    # TLSCertificateKeyFile /usr/share/ssl/certs/slapd.pem

    # Sample security restrictions
    # Require integrity protection (prevent hijacking)
    # Require 112-bit (3DES or better) encryption for updates
    # Require 63-bit encryption for simple bind
    # security ssf=1 update_ssf=112 simple_bind=64

    # Sample access control policy:
    # Root DSE: allow anyone to read it
    # Subschema (sub)entry DSE: allow anyone to read it
    # Other DSEs:
    # Allow self write access
    # Allow authenticated users read access
    # Allow anonymous users to authenticate
    # Directives needed to implement policy:
    # access to dn.base="" by * read
    # access to dn.base="cn=Subschema" by * read
    # access to *
    # by self write
    # by users read
    # by anonymous auth
    #
    # if no access controls are present, the default policy is:
    # Allow read by all
    #
    # rootdn can always write!

    #######################################################################
    # ldbm and/or bdb database definitions
    #######################################################################

    database ldbm
    suffix "o=test,c=nl"
    rootdn "cn=Manager,o=test,c=nl"
    # Cleartext passwords, especially for the rootdn, should
    # be avoided. See slappasswd(8) and slapd.conf(5) for details.
    # Use of strong authentication encouraged.
    rootpw geheim
    # rootpw {crypt}ijFYNcSNctBYg

    # The database directory MUST exist prior to running slapd AND
    # should only be accessible by the slapd and slap tools.
    # Mode 700 recommended.
    directory /var/lib/ldap

    # Indices to maintain for this database
    index objectClass eq,pres
    index ou,cn,mail,surname,givenname eq,pres,sub
    index uidNumber,gidNumber,loginShell eq,pres
    index uid,memberUid eq,pres,sub
    index nisMapName,nisMapEntry eq,pres,sub

    # Replicas of this database
    #replogfile /var/lib/ldap/openldap-master-replog
    #replica host=ldap-1.example.com:389 tls=yes
    # bindmethod=sasl saslmech=GSSAPI
    # authcId=host/ldap-master.example.com@EXAMPLE.COM
    ==================================================

    Please can some body help me out

    thanks
    redarend
  2. #2
  3. Chris Larivee
    Devshed Newbie (0 - 499 posts)

    Join Date
    Sep 2003
    Location
    Littleton, CO
    Posts
    72
    Rep Power
    12
    Couple of things:

    1. What type of authenitcation are you using? If simple drop the -x altogether. Instead use -D in the place of -x and follow it by the binddn 'cn=xxx'.

    Your command should then appear as:

    ldapadd -D 'cn=Manager,o=test,c=nl' -W -f /path/to/ldif

    If that doesn't work:

    2. Replace the -W with -w passwd and try again.

    Your command should then appear as:

    ldapadd -D 'cn=Manager,o=test,c=nl' -w passwd -f /path/to/ldif

    Of course replace passwd with your password.

    HTH

    -Chris
  4. #3
  5. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Mar 2004
    Posts
    2
    Rep Power
    0
    thanks

    i can add entries to my Ldap

IMN logo majestic logo threadwatch logo seochat tools logo