LDAP Tree
dn: ou=contacts,dc=juliux,dc=de
objectClass: organizationalUnit
ou: contacts
dn: ou=personal,ou=contacts,dc=juliux,dc=de
objectClass: organizationalUnit
ou: personal
dn: cn=juliux,ou=personal,ou=contacts,dc=juliux,dc=de
objectClass: organizationalRole
cn: juliux
dn: uid=juliux,ou=user,dc=juliux,dc=de
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
uidNumber: 4001
uid: juliux
gidNumber: 4012
givenName: XXX
sn: XXX
mail: XXXX
cn: XXX
userPassword:: XXX
shadowLastChange: 15242
homeDirectory: /home/juliux
loginShell: /bin/bash
ACL's from /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif
olcAccess: {0}to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=juliux
,dc=de" write by anonymous auth by self write by * none
olcAccess: {1}to dn.base="" by * read
olcAccess: {2}to * by dn="cn=admin,dc=juliux,dc=de" write by * read
olcAccess: {3}to dn="cn=juliux,ou=personal,ou=contacts,dc=juliux,dc=de" by dn=
"uid=juliux,ou=user,dc=juliux,dc=de" read
olcAccess: {4}to dn="cn=juliux,ou=personal,ou=contacts,dc=juliux,dc=de" by dn=
"uid=juliux,ou=user,dc=juliux,dc=de" write
test-contact.ldif
dn: uid=fdc6a36a7cc92974b190634b22bac1fe,cn=juliux,ou=personal,ou=contacts,dc=juliux,dc=de
uid: fdc6a36a7cc92974b190634b22bac1fe
objectClass: inetorgperson
objectClass: person
cn: Bar Foo
givenname: Bar
sn: Foo
street: Example Stree
displayname: Foo, Bar
command:
ldapadd -H ldapi:/// -xW -D uid=juliux,ou=user,dc=juliux,dc=de -f test_contact.ldif
Enter LDAP Password:
adding new entry "uid=fdc6a36a7cc92974b190634b22bac1fe,cn=juliux,ou=personal,ou=contacts,dc=juliux,dc=de"
ldap_add: Insufficient access (50)
additional info: no write access to parent