[Freeipa-users] Ldap error in ModifyPassword - 50: Insufficient access

[Martin Basti]

Hello, comments inline

On 29.04.2016 19:37, Gady Notrica wrote:
>
> Hey guys,
>
> After my previous issue, my password do not sync anymore with IPA. No 
> password changed for the sync user. Any ideas?
>

I don't know what your previous issue was, so please put context here.
>
> Thank you,
>
> 04/29/16 13:32:56: Ldap error in ModifyPassword
>
> 50: Insufficient access
>
> 04/29/16 13:32:56: Modify password failed for remote entry: 
> uid=jlaporte,cn=users,cn=accounts,dc=ipa,dc=domain,dc=local
>
> 04/29/16 13:32:56: Deferring password change for jlaporte
>
> 04/29/16 13:32:58: Ldap error in ModifyPassword
>
> 50: Insufficient access
>
> 04/29/16 13:32:58: Modify password failed for remote entry: 
> uid=jlaporte,cn=users,cn=accounts,dc=ipa,dc=domain,dc=local
>
> 04/29/16 13:32:58: Deferring password change for jlaporte
>
> 04/29/16 13:33:02: Ldap error in ModifyPassword
>
> 50: Insufficient access
>
> 04/29/16 13:33:02: Modify password failed for remote entry: 
> uid=jlaporte,cn=users,cn=accounts,dc=ipa,dc=domain,dc=local
>
> 04/29/16 13:33:02: Deferring password change for jlaporte
>
> 04/29/16 13:33:10: Ldap error in ModifyPassword
>
> 50: Insufficient access
>
> 04/29/16 13:33:10: Modify password failed for remote entry: 
> uid=jlaporte,cn=users,cn=accounts,dc=ipa,dc=domain,dc=local
>
> 04/29/16 13:33:10: Deferring password change for jlaporte
>
> Gady
>

Well error message is clear to me, you have low privileges to do that 
operation.
Can you check ACI or IPA privileges for the user that is trying to 
change passwords.

Martin
>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20160502/c28204c5/attachment.htm>