LDAP error "ldap_bind: Invalid credentials (49)"

Question

Dear Server professionals
I run in an error "ldap_bind: Invalid credentials (49)" eatch time I try to import a ldif file. Below I wrote my slapd.conf file and my command I use.
slapd.conf file:
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/misc.schema
include /etc/openldap/schema/samba.schema
include /etc/openldap/schema/fmserver.schema
include /etc/openldap/schema/apple.schema
include /etc/openldap/schema/netinfo.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /var/run/slapd.pid
argsfile /var/run/slapd.args
replica-pidfile /var/run/slurpd.pid
replica-argsfile /var/run/slurpd.args
replicationinterval 3
loglevel 32768
sizelimit 11000
gentlehup off
schemacheck on
allows bind_v2
schemacheck on
checkpoint 32 30 # <kbyte> <min>
database bdb
directory /private/var/db/openldap/openldap-data
suffix "o=machilfe,c=ch"
#rootdn "cn=ldapadmin,o=machilfe,c=ch"
#rootpw {SSHA}c1lrRr4xWi444e59Vez96XkohS7fTiwU
# Indices to maintain
index default pres,eq
index objectClass eq
index cn,sn,uid
# Sample security restrictions
# Disallow clear text exchange of passwords
# disallow bindsimpleunprotected
# Require integrity protection (prevent hijacking)
# Require 112-bit (3DES or better) encryption for updates
# Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64
# Sample access control policy:
# Allow read access of root DSE
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
# Directives needed to implement policy:
#access to dn.base="" by * read
#access to *
# by self write
# by users read
# by anonymous auth
# if no access controls are present, the default policy is:
# Allow read by all
# rootdn can always write!
# Some settings are maintained in slapd_macosxserver.conf,
# which is updated by Server Admin. Put your own changes in
# this file.
include /etc/openldap/slapd_macosxserver.conf
include /etc/openldap/schema/abxldap.schema
Command:
sh-3.2# ldapadd -c -D "cn=diradmin,o=machilfe,c=ch" -W -x -f /Users/ladmin/Desktop/AddressBook\ X\ LDAP\ Installation/Examples/InitialImport.ldif
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
Can anyone help me to solve this problem or where to look for this to solve?
Kind regards
Thomas Thaler

Answer 1

Make sure your dn value is correct. i.e cn=diradmin,o=machilfe,c=ch