<div dir="ltr"><pre style="white-space:pre-wrap;color:rgb(0,0,0)">Noriko,</pre><pre style="white-space:pre-wrap;color:rgb(0,0,0)">It did work, thank you for your help. Replication is now working properly.</pre><pre style="white-space:pre-wrap;color:rgb(0,0,0)">
One question, I'm used to using cn=Directory Manager as well. Is there any downside to using cn=Administrators for 'root' privileges?</pre><pre style="white-space:pre-wrap;color:rgb(0,0,0)">Thanks,</pre><pre style="white-space:pre-wrap;color:rgb(0,0,0)">
Herb</pre><pre style="white-space:pre-wrap;color:rgb(0,0,0)"><br></pre><pre style="white-space:pre-wrap;color:rgb(0,0,0)"><br></pre><pre style="white-space:pre-wrap;color:rgb(0,0,0)">Ok. Then, did these work for you?
$ ldapsearch -x -D "cn=Administrators" -w <pw> -s base -b "" "objectclass=*"
$ ldapmodify -x-D "cn=Administrators" -w <pw><< EOF
dn: cn=replication Manager,cn=config
changetype: modify
replace: userPassword
userPassword: <new_password>
EOF</pre></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 2, 2014 at 4:31 PM, Herb Burnswell <span dir="ltr"><<a href="mailto:herbert.burnswell@gmail.com" target="_blank">herbert.burnswell@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><pre style="white-space:pre-wrap">Noriko,</pre><pre style="white-space:pre-wrap"><br></pre><pre style="white-space:pre-wrap">
I receive:</pre><pre style="white-space:pre-wrap">nsslapd_rootdn: cn=Administrators</pre>
</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 2, 2014 at 4:02 PM, Herb Burnswell <span dir="ltr"><<a href="mailto:herbert.burnswell@gmail.com" target="_blank">herbert.burnswell@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><pre style="white-space:pre-wrap">Noriko,</pre><pre style="white-space:pre-wrap">Thank you for your response. It looks like there's an issue with directory manager privilege. When I attempt the command:</pre>
<pre><font color="#000000"><span style="white-space:pre-wrap">ldapsearch -x -D "cn=Directory Manager" -w <pw> -s base -b "" "objectclass=*"<br></span></font></pre><pre><font color="#000000"><span style="white-space:pre-wrap">ldap_bind: No such object (32)<br>
</span></font></pre><pre><font color="#000000"><span style="white-space:pre-wrap"><br></span></font></pre><pre><font color="#000000"><span style="white-space:pre-wrap">How can I confirm directory manager user?</span></font></pre>
<pre style="white-space:pre-wrap"><br></pre><pre style="white-space:pre-wrap">Thanks again for your help,</pre><pre style="white-space:pre-wrap">Herb</pre><pre style="white-space:pre-wrap"><br></pre><pre style="white-space:pre-wrap">
<br></pre><pre style="white-space:pre-wrap"><br></pre><pre style="white-space:pre-wrap">Hello,
This password is base64 encoded and folded at the ~80th column. (So,
please do not remove the last '=')
userPassword::
e1NTSEF9dGljWTdhcTlFSVRoYmRrZHhYcWxWN2dLZnhSMVpFeEJWd0xOeEE9PQ==
If you decode it, it looks like this:
{SSHA}ticY7aq9EIThbdkdxXqlV7gKfxR1ZExBVwLNxA==
It is SSHA hashed.
I think you have a directory manager privilege. If so, you could reset
the password by ldapmodify command?
ldapmodify ... << EOF
dn: cn=replicationManager,cn=config
changetype: modify
replace: userPassword
userPassword: <new_password>
EOF
Herb Burnswell wrote:
><i> All,
</i><div><div>><i>
</i>><i> I am taking over a newly installed 389-ds environment:
</i>><i>
</i>><i> 389-admin-1.1.29-1.el6.x86_64
</i>><i> 389-admin-console-1.1.8-1.el6.noarch
</i>><i> 389-admin-console-doc-1.1.8-1.el6.noarch
</i>><i> 389-adminutil-1.1.15-1.el6.x86_64
</i>><i> 389-console-1.1.7-1.el6.noarch
</i>><i> 389-ds-1.2.2-1.el6.noarch
</i>><i> 389-ds-base-1.2.11.15-32.el6_5.x86_64
</i>><i> 389-ds-base-libs-1.2.11.15-32.el6_5.x86_64
</i>><i> 389-ds-console-1.2.6-1.el6.noarch
</i>><i> 389-ds-console-doc-1.2.6-1.el6.noarch
</i>><i> 389-dsgw-1.1.10-1.el6.x86_64
</i>><i>
</i>><i> I have two systems that I will use as Multiple Masters. The problem
</i>><i> is when creating a replication agreement on each side, replication
</i>><i> fails with:
</i>><i>
</i>><i> 49 LDAP error invalid credentials
</i>><i>
</i>><i> So, I need to reset the replication manager user password. When I
</i>><i> look at the dse.ldif file I see:
</i>><i>
</i>><i> dn: cn=replicationManager,cn=config
</i>><i> objectClass: inetorgperson
</i>><i> objectClass: person
</i>><i> objectClass: top
</i>><i> objectClass: organizationalPerson
</i>><i> cn: replicationManager
</i>><i> sn: RM
</i>><i> passwordExpirationTime: 20380119031407Z
</i>><i> nsIdleTimeout: 0
</i>><i> userPassword::
</i>><i> e1NTSEF9dGljWTdhcTlFSVRoYmRrZHhYcWxWN2dLZnhSMVpFeEJWd0xOeEE9PQ=
</i>><i> =
</i>><i> creatorsName: cn=administrators
</i>><i> modifiersName: cn=administrators
</i>><i> createTimestamp: 20131025040123Z
</i>><i> modifyTimestamp: 20131025040123Z
</i>><i>
</i>><i>
</i>><i> This looks odd to me regarding the userPassword and it having an
</i>><i> 'extra line' after it. If I move the '=' sign back to the same above
</i>><i> line and bounce dirsrv it goes back to the above.
</i>><i>
</i>><i> In any event, how can I reset this password? Any assistance is
</i>><i> greatly appreciated.
</i>><i>
</i>><i> Thanks in advance,
</i>><i>
</i>><i> Herb</i></div></div></pre></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>