I would like to add addtional db's to my LDAP
server but am having permission problems.
My slapd.conf file has the following:
----------------------------------------------------
database bdb
suffix "dc=domainA,dc=com"
directory "/var/lib/ldap"
index objectClass eq
lastmod on
access to attribute=userPassword
by dn="cn=admin,dc=domainA,dc=com" write
by anonymous auth
by self write
by * none
access to *
by dn="cn=admin,dc=domainA,dc=com" write
by * read
database bdb
suffix "dc=domainB,dc=com"
directory "/var/lib/ldap"
index objectClass eq
lastmod on
access to attribute=userPassword
by dn="cn=admin,dc=domainA,dc=com" write
by anonymous auth
by self write
by * none
access to *
by dn="cn=admin,dc=domainA,dc=com" write
by * read
-----------------------------------------------------
When I try to add the following with the command
'ldapadd -x -D "cn=admin,dc=domainA,dc=com" -W -f domainB.ldif'
dn: dc=domainB,dc=com
objectClass: top
objectClass: dcObject
objectClass: organization
o: domainB.com
dc: domainB
dn: ou=Addressbook,dc=domainB,dc=com
ou: Addressbook
objectClass: organizationalUnit
dn: cn=user1 last,ou=Addressbook,dc=domainB,dc=com
objectclass: inetOrgPerson
cn: user1 last
sn: last
telephoneNumber: 123.4567
mail: them@theiraddress
ou: Their LLC
mobile: xxx-xxxx
-----------------------------------------
I get the following error:
Enter LDAP Password:
adding new entry "dc=domainB,dc=com"
ldapadd: update failed: dc=domainB,dc=com
ldap_add: Insufficient access (50)
The password works for domainA (I just updated all 2,000 entries).
Anyone want to help me out here? I never really have understood the permissions
set up in my slapd.conf file.
Do I nee a seperate admin dn for each domain? If so, how do I initially
add it?
v/r
-mike