title: openldap: Insufficient access
body: <p>I have a query about OpenLdap and importing a ldiff. I have Openldap running with Windows.</p>
  
  <p>My slapd.conf:</p>
  
  <pre><code>database    mdb
  suffix      "dc=aaa,dc=com"
  rootdn      "cn=Manager,dc=aaa,dc=com"
  # Cleartext passwords, especially for the rootdn, should
  # be avoid.  See slappasswd(8) and slapd.conf(5) for details.
  # Use of strong authentication encouraged.
  rootpw    secret
  
  # The database directory MUST exist prior to running slapd AND
  # should only be accessible by the slapd and slap tools.
  # Mode 700 recommended.
  directory ./data
  searchstack 20
  # Indices to maintain
  index mail pres,eq
  index objectclass pres
  index default eq,sub
  index sn eq,sub,subinitial
  index telephonenumber
  index cn
  </code></pre>
  
  <p>I can view the my connection using apache active directory.</p>
  
  <p>I can see dc=aaa,dc=com.</p>
  
  <p>I am trying to import a ldif file.</p>
  
  <p>At the top, it contains:</p>
  
  <pre><code>dn: cn=ab3java,cn=schema,cn=config
  objectClass: olcSchemaConfig
  cn: ab3java
  </code></pre>
  
  <p>When  I run </p>
  
  <pre><code>ldapmodify -a -x -D "cn=Manager,dc=aaa,dc=com" -w secret -H ldap:// -f ab3java.ldif
  </code></pre>
  
  <p>I get the following error:</p>
  
  <pre><code>adding new entry "cn=ab3java,cn=schema,cn=config"
  ldap_add: Insufficient access (50)
  </code></pre>
  
  <p>I cannot see cn=config in ldap browser.</p>
  
  <p>Please advise. How can i get the correct access?</p>
  
  <p>Regards,
  B.</p>