LinuxQuestions.org - ldap adressbook thunderbird ok outlook error (34)

im having a openldap to auth unix and windows users in our network.
everything is working fine, just the adressbook of outlook (office 2k3) is driving me nuts.

i test addressbook from thunderbird, erverthing fine.
also outlook express, jsut ms-outlook 2003 address book is not working
if i add a directory ldap.locomotion.local and with AUTH username and password it gives me an "Unknown DN Syntax (34)"
i also test cn=username,dc=locomotion,dc=local but then i
got unknown username or password on the ldap server side.

Code:



slapd.conf

#

# See slapd.conf(5) for details on configuration options.

# This file should NOT be world readable.

#

include                /etc/openldap/schema/core.schema

include                /etc/openldap/schema/cosine.schema

include                /etc/openldap/schema/inetorgperson.schema

include                /etc/openldap/schema/nis.schema

include                /etc/openldap/schema/samba3.schema



# Define global ACLs to disable default read access.



# Do not enable referrals until AFTER you have a working directory

# service AND an understanding of referrals.

#referral        ldap://root.openldap.org



pidfile                /var/run/slapd/slapd.pid

argsfile        /var/run/slapd/slapd.args

loglevel        512



# Load dynamic backend modules:

# modulepath        /usr/lib/openldap/modules

# moduleload        back_ldap.la

# moduleload        back_meta.la

# moduleload        back_monitor.la

# moduleload        back_perl.la



# Sample security restrictions

#        Require integrity protection (prevent hijacking)

#        Require 112-bit (3DES or better) encryption for updates

#        Require 63-bit encryption for simple bind

# security ssf=1 update_ssf=112 simple_bind=64



allow        bind_v2



# Sample access control policy:

#      Root DSE: allow anyone to read it

#      Subschema (sub)entry DSE: allow anyone to read it

#      Other DSEs:

#              Allow self write access to user password

#              Allow anonymous users to authenticate

#              Allow read access to everything else

#      Directives needed to implement policy:

# access to dn.base=""

#        by * read



# if no access controls are present, the default policy

# allows anyone and everyone to read anything but restricts

# updates to rootdn.  (e.g., "access to * by * read")

#

# rootdn can always read and write EVERYTHING!



#access to attr=userPassword,sambaNTPassword,sambaLMPassword,mail

#access to dn.base="dc=locomotion,dc=local" attr=sambaLMPassword

#        by dn="cn=Manager,dc=locomotion,dc=local" write

#        by self write

#        by * read

#auth



#access to dn.base="ou=People,dc=locomotion,dc=local"

#        by * read

#        by * auth



access to attrs=userPassword

        by self write

        by users auth

        by anonymous auth

access to * by * read



#access to dn.base="cn=vpn,ou=Group,dc=locomotion,dc=local"

#        by dn="uid=vpnread,ou=People,dc=locomotion,dc=local" read



#access to dn.base="dc=locomotion,dc=local"

#        by * read

#        by * auth



#access to dn.base=""

#        by self write

#        by * read





#######################################################################

# BDB database definitions

#######################################################################



database        ldbm

suffix          "dc=locomotion,dc=local"

rootdn          "cn=Manager,dc=locomotion,dc=local"

rootpw          {MD5}.hidden.

# replication

#replogfile      /var/lib/ldap/master.replog

#replica        host=linuxmeta.locomotion.local:389

#  binddn="cn=Manager,dc=locomotion,dc=local"

#  bindmethod=simple

#  credentials=".hidden."



# Cleartext passwords, especially for the rootdn, should

# be avoid.  See slappasswd(8) and slapd.conf(5) for details.

# Use of strong authentication encouraged.

# password settings for compatibility



#password-hash  {crypt}

#password-crypt-salt-format      "$1$%.8s"



# The database directory MUST exist prior to running slapd AND

# should only be accessible by the slapd/tools. Mode 700 recommended.

directory      /var/lib/ldap



## Indices to maintain

index  objectclass            eq

index  mail,givenname          eq

index  cn                      pres,sub,eq

index  sn                      pres,sub,eq



## required to support pdb_getsampwnam

index  uid                    pres,sub,eq



## required to support pdb_getsambapwrid()

index  displayName            pres,sub,eq



## uncomment these if you are storing posixAccount and

## posixGroup entries in the directory as well

index  uidNumber              eq

index  gidNumber              eq

index  memberUid              eq



index  sambaSID                eq

index  sambaPrimaryGroupSID    eq

index  sambaDomainName        eq

index  default                sub

here is a sample user:

Code:

dn: uid=benjamin,ou=People,dc=locomotion,dc=local

objectClass: top

objectClass: person

objectClass: organizationalPerson

objectClass: inetOrgPerson

objectClass: posixAccount

objectClass: shadowAccount

objectClass: sambaSamAccount

cn: benjamin

sn: benjamin

givenName: benjamin

uid: benjamin

uidNumber: 1174

gidNumber: 513

loginShell: /sbin/nologin

gecos: System User

structuralObjectClass: inetOrgPerson

entryUUID: dbc831dc-6a2d-102e-924d-8f2902344e26

creatorsName: cn=Manager,dc=locomotion,dc=local

createTimestamp: 20091120143639Z

sambaLogonTime: 0

sambaLogoffTime: 2147483647

sambaKickoffTime: 2147483647

displayName: benjamin

sambaSID: S-1-5-21-3536280432-4137998717-326857605-3348

sambaPrimaryGroupSID: S-1-5-21-3536280432-4137998717-326857605-513

sambaProfilePath: \\san\profiles\benjamin

sambaHomeDrive: X:

sambaHomePath: \\hera\people\benjamin

homeDirectory: /dev/null

sambaLMPassword: .hidden.

sambaAcctFlags: [U]

sambaNTPassword: .hidden

userPassword:: .hidden.

shadowLastChange: 14568

shadowMax: 1000

sambaPwdCanChange: 1258730495

sambaPwdMustChange: 9223372036854775807

sambaPasswordHistory: 00000000000000000000000000000000000000000000000000000000

 00000000

sambaPwdLastSet: 1258730495

entryCSN: 20091120152135Z#000001#00#000000

modifiersName: cn=Manager,dc=locomotion,dc=local

modifyTimestamp: 20091120152135Z

i also test it form outlook without AUTH - it does not work
i restart outlook everytime i do a config change.

how can i get adressbook entrys from ldap?