Jim, >Date: Tue, 19 Feb 2008 12:11:10 -0600 >From: "Jim Canfield" <jcanfield@xxxxxxxxxxx> >m.roth2006@xxxxxxx wrote: >> Following myself up... >>> Date: Tue, 19 Feb 2008 12:12:13 -0500 (EST) >>> From: <m.roth2006@xxxxxxx> <snip> >Try this: > >access to dn.base="" > by self write > by * auth > >access to attr=userPassword > by self write > by * auth > >access to attr=shadowLastChange > by self write > by * read > >access to * > by * read > by anonymous auth No joy. Also, it bitched at me when I restarted slapd, saying that attr was deprecated and undocumented, and that I should use attrs, which I did. I also tried putting in dn.base="ou=People,dc=example,dc=com". Still a 49 (invalid credentials), and that's after I did an ldapmodify to reset my password to an absolutely known value that I tested by logging onto another box. mark -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list