centos 6.4 openldap 2.4 版本 系统认证无法更改密码,错误提示:
openldap: LDAP password information update failed: Insufficient access
tail /var/log/securce
passwd: pam_unix(passwd:chauthtok): user "test" does not exist in /etc/passwd
解决方案:
在 sldap.conf 中加入:
access to attrs=userPassword
by self write
by anonymous auth
by dn.base="cn=Manager,dc=mycompany,dc=com" write
by * none
access to *
by self write
by dn.base="cn=Manager,dc=mycompany,dc=com" write
by * read
上面行最主要的加在database config 前面,否则不生效。
然后执行
rm -rf /etc/openldap/slapd.d/*
slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d
chown -R ldap:ldap /etc/openldap/slapd.d
service slapd restart
百度空间:http://hi.baidu.com/nessus1/item/2425dc4cdcb2251c896d10d3
来源:oschina
链接:https://my.oschina.net/u/142602/blog/134746