Simon Matthews via FreeIPA-users wrote:
I am trying to follow the instructions on this page: https://www.freeipa.org/page/Apache_Group_Based_Authorization
Because I want to only grant access to the web resources and not logins and because the load can often be heavy, I am trying use the mod_authnz_ldap setup. I don't have any virtual host configuration on the web servers.
I have a basic setup of IPA and have been able to add users and modify them through the ipa web interface.
When I try to run the command: ldapmodify -h ipa01.example.com -p 389 -x -D "cn=Directory Manager" -w <DM Password> -f httpbind.ldif
I get the result: ldap_modify: No such object (32)
Naturally, I changed the "dc=example,dc=com" to "dc=a,dc=b,dc=c", where I set up my ipa installation as "a.b.c".
Hard to say without seeing the actual ldif you are loading but you'll need to carefully check the dn to ensure it matches your configuration.
rob