<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 05/16/2011 10:13 AM, Stephen Lorenz wrote:
<blockquote
cite="mid:BANLkTinZA9DUug6aVCeA=pCyBLZ5WD2Xgg@mail.gmail.com"
type="cite">Hi,<br>
<div><br>
</div>
<div>We are trying to set up our 389 DS instance and everything
seems to work except that LDAP browsers cannot seem to access
the schema. For example, in the LDAPSort LDAP Admin Tool we
receive the error message:</div>
<div><br>
</div>
<div>"Unable to read schema!!" Unable to read schema, please
login/bind with an account which has access to schema - You can
also rebind with any entry using the right-click menu and
selecting rebind.</div>
<div><br>
</div>
<div>However, we are not trying to access the
directory anonymously; we receive this error even when binding
as Directory Manager. </div>
<div><br>
</div>
<div>We also cannot browser the schema using a standard ldapsearch
command. </div>
<div><br>
</div>
<div>Any ideas of how to enable schema reading?</div>
</blockquote>
ldapsearch -x -D "cn=directory manager" -W -s base -b "cn=schema"
"objectclass=*" attributeTypes objectClasses matchingRules ......<br>
Look in the directory server access log in
/var/log/dirsrv/slapd-INSTNAME/access<br>
to see what search the client is doing<br>
1) it's not searching cn=schema<br>
2) it's not requesting the attributes attributeTypes objectClasses
etc. explicitly - these attributes are operational attributes and
must be explicitly requested in the ldap search request<br>
<blockquote
cite="mid:BANLkTinZA9DUug6aVCeA=pCyBLZ5WD2Xgg@mail.gmail.com"
type="cite">
<div><br>
</div>
<div>Thanks,<br>
Stephen</div>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
--
389 users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a>
<a class="moz-txt-link-freetext" href="https://admin.fedoraproject.org/mailman/listinfo/389-users">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></pre>
</blockquote>
<br>
</body>
</html>