🚀 go-pugleaf

Hi!

I have a big problem with my LDAP-Server:

I want to add some Users but this error comes to me "ldap_bind:
Invalid credentials"
the command was:

ldapadd -D dn="cn=admin,ou=People,dc=leipziger-messe,dc=de" -w secret
-f /tmp/it.ldif


what's worng????
Help!

My Files:

---slapd.conf -----

# This is the main ldapd configuration file.

# Schema and objectClass definitions
include		/etc/openldap/slapd.at.conf
include		/etc/openldap/slapd.oc.conf

# Schema for supporting Netscape Roaming
include		/etc/openldap/netscape_roaming.at.conf
include		/etc/openldap/netscape_roaming.oc.conf

# Schema for supporting Debian Package Directory entries
#include		/etc/openldap/debian.at.conf
#include		/etc/openldap/debian.oc.conf

# Schema check allows for forcing entries to
# match schemas for their objectClasses's
schemacheck	off

# Where clients are refered to if no
# match is found locally
referral	ldap://ldap.four11.com

# Where the pid file is put. The init.d script
# will not stop the server if you change this.
pidfile		/var/run/slapd.pid

# Read slapd.conf(5) for possible values
loglevel	0

#######################################################################
# ldbm database definitions
#######################################################################

# The backendard
database	ldbm

# The base of your directory
suffix		"dc=leipziger-messe,dc=de"

# Where the database file are physically stored
directory	"/var/lib/openldap"
rootdn "cn=admin,ou=People,dc=leipziger-messe,dc=de"
rootpw secret

# Save the time that the entry gets modified
lastmod on

# By default, only read access is allowed
defaultaccess	read

# For Netscape Roaming support, each user gets a roaming
# profile for which they have write access to
access to dn=".*,ou=Roaming,dc=leipziger-messe,dc=de"
	by dnattr=owner write

# The userPassword by default can be changed
# by the entry owning it if they are authenticated.
# Others should not be able to see it, except the
# admin entry below
access to attribute=userPassword
	by dn="cn=admin,ou=People,dc=leipziger-messe,dc=de" write
	by self write
	by * none

# The admin dn has full write access
access to * by dn="cn=admin,ou=People,dc=leipziger-messe,dc=de" write

# End of ldapd configuration file
----------------------

---- it.ldif ----

dn: uid=skober, ou=IT, dc=leipziger-messe, dc=de
objectclass: person
objectclass: organizational
cn: Sebastian Kober
sn: Kober
uid: skober
mail: Sebastian.Kober@leipziger-messe.de
l: Leipzig
postalcode: 04356
streetadress: Messe-Allee 1


dn: uid=sponndorf, ou=IT, dc=leipziger-messe, dc=de
objectclass: person
objectclass: organizational
cn: Steven Ponndorf
sn Ponndorf
uid: sponndorf
mail: s.ponndorf@leipziger-messe.de
l: Leipzig
postalcode: 04356
streetadress: Messe-Allee 1

-------------------------