Rich/All, I finally got my ldif to import. I found I had a small number of groups with bogus information in their records (I'll include one actual example below). Once these couple of entries where removed/corrected, everything imported. I have also including the specific on 389 / fedora version-ing information. The use of: fedora-idm-console -D 9 2>&1 |tee console.log - was invaluable. [dhe@localhost testdump]$ rpm -qi 389-ds-base Name : 389-ds-base Version : 1.2.10 Release : 0.5.a5.fc16 Architecture: x86_64 Install Date: Tue 17 Jan 2012 03:29:47 PM EST Group : System Environment/Daemons Size : 4907156 License : GPLv2 with exceptions Signature : RSA/SHA256, Fri 04 Nov 2011 02:31:54 PM EDT, Key ID 067f00b6a82ba4b7 Source RPM : 389-ds-base-1.2.10-0.5.a5.fc16.src.rpm Build Date : Fri 04 Nov 2011 07:13:20 PM EDT Build Host : x86-17.phx2.fedoraproject.org Relocations : (not relocatable) Packager : Fedora Project Vendor : Fedora Project URL : http://port389.org/ Summary : 389 Directory Server (base) Description : 389 Directory Server is an LDAPv3 compliant server. The base package includes the LDAP server and command line utilities for server administration. [root@localhost testdump]# cat /etc/issue Fedora release 16 (Verne) Kernel \r on an \m (\l) [root@localhost testdump]# uname -a Linux localhost.localdomain 3.2.1-3.fc16.x86_64 #1 SMP Mon Jan 23 15:36:17 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux dn: cn=DRSS,ou=Groups,dc=localdomain modifyTimestamp: 20110909040227Z modifiersName: uid=suser,dc=localdomain cn: DRSS gidNumber: 11380 memberUid: u1 memberUid: u2 memberUid: u3 memberUid: u4 ntUserDomainId: DRSS objectClass: top objectClass: groupofuniquenames objectClass: posixgroup objectClass: ntgroup uniqueMember: uid=u1,u2,u3,u4,ou=Users,dc=localdomain >> This doesn't look like a unique Member.... -or- uniqueMember: uid= >> Null uniqueMember: uid=u1,ou=Users, dc=localdomain uniqueMember: uid=u2,ou=Users, dc=localdomain uniqueMember: uid=u3,ou=Users, dc=localdomain creatorsName: uid=suser,dc=localdomain createTimestamp: 20110909040111Z nsUniqueId: 4cd49801-da9811e0-90ddb7ef-aa3939d0 I guess the take away is, you can create garbage inside LDAP, export said garbage, but don't expect it to import. Is the result of having slapd die the normal behavior, or should a bug report be filled? Thanks for the help, Dan On 01/24/2012 03:21 PM, Rich Megginson wrote: On 01/24/2012 12:25 PM, Dan H. Eicher wrote:Right. import is not an "additive" operation, it is a "destructive" operation. If you want the entry to be added, add it first to the LDIF file. That means your ldif file will first need an entry for dc=localdomain, then under that an entry for ou=Users,dc=localdomain, then your user entries. |
-- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users