no i dont see any user when i perform a getent passwd at client, which makes me wonder what i did wrong because i follow all your steps..

I was using another computer for the Web Browser. Also if you add a user into ldap via phpldapadmin you don’t see it on the client when you perform a getent passwd?

its me again, i got a quests to ask…im using ubuntu server edition and have install the openldap server…..but when i connect to the client somehow the somehow its nothing as in no information on the user that i add…..

another quest, you using the server edition and you install the phpldapadmin, how do u get into the web brower? did you install both phpldapadmin to both client and server?

Thank you

Thats quite unusual. Typically if you do not have the admin user attached to the root account, then there should be no possible way to create accounts as the root user, as it would be treated as a “nobody”. Without more details including your slapd.conf file and your ldap.conf file I can only shoot in the dark here. However I can recommend that you take a look at the ACLs portion of Part 2.

then how do i make the client root doesnt act as on admin? because i followed your steps and the client can create new user

The client can only modify values within the LDAP environment if you allow the Client’s root the ability to act as an admin. If you do not allow this, then this cannot happen.

i want to ask quest, when testing using client and connect to the server, apparently the client can create a user as well…how do we restrict the user not to create a new user?

thank you.

It is something I’m working on. I just want to make sure I have any possible areas I want to cover in the post before I post it.