Tuesday, October 7, 2014

Tivoli Directory Server: "Insufficient access --- Error, Password may not be modified"

When you create a normal interOrgPerson entry using cn=root in Tivoli Directory Server, it has this attribute

entryOwner: access-id:CN=ROOT


Because of this when you try to change the password, you will see an error like below

[root@localhost etc]# idsldapchangepwd -D "cn=chirag,ou=users,ou=JK Enterprise,O=sample" -w passwd -n chirag1! -p 1389
ldap_simple_bind:  Error, Password must be changed after reset
changing password for entry cn=chirag,ou=users,ou=JK Enterprise,O=sample
Insufficient access --- Error, Password may not be modified

Change the attribute like this and then attempt to change the password

entryOwner: access-id:CN=this

[root@localhost etc]# idsldapchangepwd -D "cn=chirag,ou=users,ou=JK Enterprise,O=IDAAS" -w passwd -n chirag1! -p 1389
ldap_simple_bind:  Error, Password must be changed after reset
changing password for entry cn=chirag,ou=users,ou=JK Enterprise,O=sample



Labels: ,

0 Comments:

Post a Comment

Subscribe to Post Comments [Atom]

<< Home