Re: Access problem

[Chris R. <chr...@me...>]

Murugan K G <mur...@ya...> wrote:
> Hi  LDAP gurus
>      I am trying to develop one perl  module for 
> "RefreshLDAPServerRequest"  eDirectory extension
> as below. While executing this script , i am getting 
> LDAP_INSUFFICIENT_ACCESS  message code and
> Insufficient access message error.   Here i logged  in
> with admin rights only. After  that also  , i am
> getting the same.  Any help  greatly appriciated. 
> 
>  Am  i doing anything in the script?.
> 
> Regards
> K.Murugan
> 
> 
> 
> use Convert::ASN1;
> use Net::LDAP qw(:all);
> use Net::LDAP::Util qw(ldap_error_name       
>                           ldap_error_text) ;    # use
> for Error handling
> require Net::LDAP::Extension;
> require Net::LDAP::Message;
> 
> $ldap = Net::LDAP->new("xxx.xx.xxx.xxx") or die "$@";
> print $ldap->{error};
> $asn = Convert::ASN1->new;
> $ldap->bind('username',password => 'password') or die
> "Not able to bind";

Are you sure you're binding with LDAPv3? You won't be able to do any
extended operations against a server using LDAPv2. Net::LDAP's default is
LDAPv2.

You also have this:

>	 requestValue => null

I'm not sure what you intended here. Do you need an ASN.1 NULL value to get
encoded at this point? The requestValue is defined as OPTIONAL in the ASN.1
so if you don't need one, simply don't set requestValue in the encode().

Cheers,

Chris