openldap nightmare

[Craig White]

On Mon, 2007-11-05 at 21:19 +0000, Timothy Murphy wrote:
> I've spent today trying to get openldap running under Fedora 7.
> The documentation is unbelievably bad -
> even worse than sendmail, the previous winner.
> It is almost as incomprehensible as my VHS manual in Japanese.
> 
> As far as I can see, openldap people speak a language
> unknown to the rest of humanity.
> Where normal people say www.myhost.com,
> they say "dc=www,dc=myhost,dc=com".
> 
> Anyway, I've got to the stage where I'm trying to install
> an address book with ldapadd with
> [root at alfred tim]#
> ldapadd -x -D 'cn=Manager,dc=alfred,dc=gayleard,dc=com' -W -f /etc/openldap/addressbook.ldif
> Enter LDAP Password:
> and I get the error
> ldap_bind: Invalid credentials (49)
> 
> which I find slightly baffling since ldapsearch seems to work ok:
> 
> [root at alfred tim]# ldapsearch -x -b '' -s base '(objectclass=*)'
> namingContexts
> # extended LDIF
> ...
> # numResponses: 2
> # numEntries: 1
> 
> So what sort of credentials do they want?
----
whatever the password that is set for the bind address (-D
'cn=Manager,dc=alfred,dc=galeard,dc=com)
----
> Would it be cheating if they dropped a hint?
----
invalid credentials pretty much explains it - bind name/password
combination don't work.

Recommendation...

LDAP System Administration by Gerald Carter

simplifies everything

Craig