Red Hat Bugzilla – Bug 129224
ldapadd does not support referrals
Last modified: 2015-01-07 19:08:19 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.4.1)
Description of problem:
I have set up Openldap in a Master Slave scenario.
While trying to add an entry on the slave with ldapadd with a simple
bind I get the error-message. "Insufficient access to parent"
We have reseached the problem a bit. What happens.
ldapadd connects and authenticates to the slave.
When it sends the ldif it gets the referral to the master.
Then ldap add connects to the master and resends the ldif to the master.
The master then gives the erromessage, because ldapadd forgot to
pam_ldap can change passwords on via the slave, so the problem is
definetely on ldapadd
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Configure Master/Slave ldap
2. ldapadd -f test.ldif -D <CN> -W [-x -C -v -d3]
 options for debug messages, which show the described behaviour
Actual Results: entry was not created
Expected Results: entry is added
performing the command on the master works nicely.
Master/Slave have the identical configuration apart from the
master/slave specific bit.
Problem was verified on a different machine.
This bug is filed against RHEL 3, which is in maintenance phase.
During the maintenance phase, only security errata and select mission
critical bug fixes will be released for enterprise products. Since
this bug does not meet that criteria, it is now being closed.
For more information of the RHEL errata support policy, please visit:
If you feel this bug is indeed mission critical, please contact your
support representative. You may be asked to provide detailed
information on how this bug is affecting you.