Delegated Administrator Insufficient access

Question

Hi,
I'm running iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004)
libimta.so 5.2 Patch 2 (built 19:30:12, Jul 14 2004)
SunOS mail 5.8 Generic_117350-02 sun4u sparc SUNW,Ultra-Enterprise
When I try to modify something i get the following ldap error:
[13/Oct/2005:11:36:19 +0100] conn=3785 op=9 BIND dn="uid=MailAdmin,ou=People,o=xxx.xx,o=root" method=128 version=3
[13/Oct/2005:11:36:19 +0100] conn=3785 op=9 RESULT err=0 tag=97 nentries=0 etime=0
[13/Oct/2005:11:36:19 +0100] conn=3785 op=10 MOD dn="uid=rlam,ou=AHP_nonstaff,o=xxx.xx,o=root"
[13/Oct/2005:11:36:19 +0100] conn=3785 op=10 RESULT err=50 tag=103 nentries=0 etime=0
[13/Oct/2005:11:36:19 +0100] conn=3785 op=11 BIND dn="" method=128 version=3
[13/Oct/2005:11:36:19 +0100] conn=3785 op=11 RESULT err=0 tag=97 nentries=0 etime=0
ldaperror-50 means Insufficient access
The MailAdmin user is the Service Administrator.
So, I have this questions:
1- Which group(s) should the Service Administrator be a member of.
2 - Is that an ACI problem? if so where can I change it?
Hope you got enough information to help me,
Regards

Answer 1

Again, NDAdmin is the USER that Delegated Admin uses to talk to the Directory. that's the user that has rights to make the changes. NDAdmin is not a user that YOU use to log into iDA. "ServiceAdmin" is the user that normally would be used for that.
You can locate the password that DA uses, in the resource.properties file in iDA.
I don't understand your question, so am having a hard time answering it.
I don't claim to be expert with Directory, or setting ACI. I suggest that before making such changes, you back theDirectory up...