[LDAP-interop] Bad DN starting slapd

[Max Alberto León]

Hi,
New to LDAP and this is actually my first try.

There is the thing I'm trying to setup the basic ACLs on the slapd.conf.
But the line where I grant access for the dn root to specific attrs 
keeps giving me this error:


/etc/openldap/slapd.conf:  line 80  :bad DN "cn=mago,dc=merce,dc=com" in 
by DN Clause

<access clause> ::= access to <what>  by <who> <access>    <control>   +


Any help would be hihgly apreciate.

Here is the slapd.conf


#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include        /etc/openldap/schema/core.schema
include        /etc/openldap/schema/cosine.schema
include        /etc/openldap/schema/inetorgperson.schema
include        /etc/openldap/schema/nis.schema
include        /etc/openldap/schema/samba.schema
include        /etc/openldap/schema/redhat/autofs.schema


# Allow LDAPv2 client connections.  This is NOT the default.
allow bind_v2

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral    ldap://root.openldap.org

pidfile        /var/run/slapd.pid
argsfile    /var/run/slapd.args

# Load dynamic backend modules:
# modulepath    /usr/sbin/openldap
# moduleload    back_bdb.la
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la



#######################################################################
# ldbm and/or bdb database definitions
#######################################################################

database    bdb
suffix        "dc=merce,dc=com"
rootdn        "cn=mago,dc=merce,dc=com"

#Users restrictions
access to attrs=userPassword,sambaNTPassword,sambaLMPassword
    by dn.base="cn=mago,dn=merce,dn=com"    write
    by self             write
    by anonymous            auth
    by *                none

access to *
    by self                write
    by dn.base="cn=mago,dn=merce,dn=com"    write
    by *                read


rootpw    {SSHA}JbhEXhI+tjTT3Wz958GezXi/ey0KRBHL
directory    /var/lib/ldap

# Indices to maintain for this database
index objectClass                       eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub
index sambaSID                eq
index sambaPrimaryGroupSID        eq
index sambaDomainName            eq


_______________________________________________
LDAP-interop mailing list
LDAP-interop at fini.net
http://lists.fini.net/mailman/listinfo/ldap-interop