On 18.08.2014 18:17, Andrew Niemantsverdriet wrote:

> I'm am using FreeRadius 2.1.12 from the CentOS repo and am trying to get
> it working with OpenLDAP 2.3.43 also from the CentOS repo. Everything is
> working great until I add and ACL to OpenLDAP that gives self write
> access to sambaNTpassword. When that line is added FreeRadius will stop
> authenticating clients.

Do you use an ACL like:

access to attrs=sambaNTpassword
  by self =w

? If so, then you granted write access, but no read access. You need to use

access to attrs=sambaNTpassword
  by self =rw

Note that there is a difference between writing

access to attrs=sambaNTpassword
 by self write

and

access to attrs=sambaNTpassword
 by self =w

The first one includes read access, the second one does not.

Use the slapacl utility to test your ACLs and see the difference.

Grüße,
Sven.