ldap_add insufficient access (50) openldap

Error:

ldap_add insufficient access (50) openldap

Cause:

The  ldap_add insufficient access (50) openldap exception is thrown while adding or modifying the cn=Config object in the Open Ldap because the admin user CN=Manager,dc=example,dc=edu don't  have enough privileges to update the schema.

Solution:

1. Finding the olcRootDN in olcDatabase={0}config.ldif

You need  to update the schema  using the cn=Config Object. You can find the olcRootDN as follows

Go to the /etc/openldap/slapd.d/cn=config directory and edit the olcDatabase={0}config.ldif file. Find the olcRootDN in this file. In my config files olcRootDN is olcRootDN: cn=config

2. Updating the olcRootDN password 

   2.1 Generating the New Password
 
  execute the slappasswd command and it will generate the new password as follows.


 slappasswd
New password:
Re-enter new password:
{SSHA}Hfpsjkt/Am2LDOndfBmPyjWyXaBk8K+

   2.2 Updating the olcRootDN password

Go to the /etc/openldap/slapd.d/cn=config and edit the olcDatabase={0}config.ldif file and add the generated password after olcRootDN

olcRootPW: {SSHA}Hfpsjkt/Am2LDOndfBmPyjWyXaBk8K+

Save the file and restart the Ldap Server

3. Updating the Config Object

 3.1  Adding the module object (addmodule.ldif)

dn: cn=module,cn=config
objectClass: olcModuleList
cn: module
olcModulePath: /usr/lib64/openldap
olcModuleLoad: memberof

 3.2 Executing the LDAP command

ldapadd-x -h <hostname> -p 389 -D CN=config -W -f addmodule.ldif


The ldap_add insufficient access (50) openldap will be resolved after executing the above steps.