Python ldap write access (acl) from another machine?

Question

i've downloaded and installed:
http://python-ldap.sourceforge.net/
and used this example code:
http://aspn.activestate.com/ASPN/Cookbook/Python/Recipe/303336
and i'm using this code to connect to another machine that is running a vanilla install of leopard 10.5.2.
The search works fine, but add and delete return this error:
{'info': 'no write access to parent', 'desc': 'Insufficient access'}
It would appear that the default acl for * doesn't allow for other computers to have write access?
access to *
by set="user/uid & [cn=admin,cn=groups,dc=test,dc=mydomain,dc=com]/memberUid" write
by dn.exact="cn=test.mydomain.com$,cn=computers,dc=test,dc=mydomain,dc=com" write
by sockurl="ldapi://%2Fvar%2Frun%2Fldapi" write
by * read
What I don't understand about acls is: are the 'by' lines all additive? if I was to add a new acl like the one below, will that give other computers, when authenticated as someone in the admin group, write access?
It would appear that the default acl for * doesn't allow for other computers to have write access? or commenting out the dn=exact and sockurl?
access to *
by set="user/uid & [cn=admin,cn=groups,dc=test,dc=mydomain,dc=com]/memberUid" write
by * read
do i add this to /etc/openldap/slapd_macosxserver.conf and restart the server?

Answer 1

Hi,
You can check these few text-book style troubleshooting steps :-
1. Can you PING the system computername from another System ?
2. Can you check the ServerName Parameter in httpD.Conf of your IAS's Apahce & check if it contains computername ?
3. Can you check if you can access http://computername:7777 or http://computername:7778 ( Default Ports ).
4. Can you Telnet to computername at Port 80 ( using some software like Putty ) and issue Http Commands like GET / HTTP/1.1 ( just to check if the port is open ) ?
Regards,
Sandeep