-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rich, Thanks again for your help. Now that I have created the sub suffices, I figured out that I also needed to create the databases. I did this by adding the following. dn: cn=SNS,cn=ldbm database,cn=plugins,cn=config changetype: add objectclass: extensibleObject objectclass: nsBackendInstance nsslapd-suffix: dc=sns,dc=ias,dc=edu dn: cn=MATH,cn=ldbm database,cn=plugins,cn=config changetype: add objectclass: extensibleObject objectclass: nsBackendInstance nsslapd-suffix: dc=math,dc=ias,dc=edu dn: cn=ITG,cn=ldbm database,cn=plugins,cn=config changetype: add objectclass: extensibleObject objectclass: nsBackendInstance nsslapd-suffix: dc=itg,dc=ias,dc=edu dn: cn=NET,cn=ldbm database,cn=plugins,cn=config changetype: add objectclass: extensibleObject objectclass: nsBackendInstance nsslapd-suffix: dc=net,dc=ias,dc=edu Now the databases are showing up in /var/lib/dirsrv/slapd-ldap*/db. Now I will tackle replication for these new DC's. Thanks, ep On 02/19/2014 02:52 PM, Brian Epstein wrote: > Ah, I think I see the error of my ways. I blind copied the > "nsslapd-backend: GroupData" from the webpage, not realizing that > this was the name of the database for the sub suffix. > > I'll try it again and give a unique database for each dc I add. > > Thanks, ep > > On 02/19/2014 02:38 PM, Brian Epstein wrote: >> Rich and 389-users, > >> I followed the directions on the page you had sent, >> https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Configuring_Directory_Databases.html#Creating_and_Maintaining_Suffixes-Creating_Suffixes > >> I was encouraged when I did the first ldapmodify, which seemed >> to work well. The second add didn't work, though and gave me a >> cryptic answer. The error log gave me a bit more explanation. > >> [19/Feb/2014:13:26:13 -0500] - ERROR: backend GroupData is >> already pointed to by a mapping tree node. Only one mapping tree >> node can point to a backend > >> Since then, I haven't been able to add my other sub suffix dc's. > >> Any idea what could be going on? I have a feeling I'm looking at >> this incorrectly. > >> Thanks, Brian > >> [root@ldap3 slapd-ldap3]# ldapmodify -x -a -h localhost -p 389 -D >> "cn=directory manager" -W Enter LDAP Password: dn: >> cn=dc=math\,dc=ias\,dc=edu,cn=mapping tree,cn=config changetype: >> add objectclass: top objectclass: extensibleObject objectclass: >> nsMappingTree nsslapd-state: backend nsslapd-backend: GroupData >> nsslapd-parent-suffix: dc=ias,dc=edu cn: dc=math,dc=ias,dc=edu > >> adding new entry "cn=dc=math\,dc=ias\,dc=edu,cn=mapping >> tree,cn=config" > >> dn: cn=dc=sns\,dc=ias\,dc=edu,cn=mapping tree,cn=config >> changetype: add objectclass: top objectclass: extensibleObject >> objectclass: nsMappingTree nsslapd-state: backend >> nsslapd-backend: GroupData nsslapd-parent-suffix: dc=ias,dc=edu >> cn: dc=sns,dc=ias,dc=edu > >> adding new entry "cn=dc=sns\,dc=ias\,dc=edu,cn=mapping >> tree,cn=config" ldap_add: Server is unwilling to perform (53) > > > > >> -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx >> https://admin.fedoraproject.org/mailman/listinfo/389-users > > > -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx > https://admin.fedoraproject.org/mailman/listinfo/389-users > - -- Brian Epstein <bepstein@xxxxxxx> +1 609-734-8179 Manager, Network and Security Institute for Advanced Study Key fingerprint = 128A 38F4 4CFA 5EDB 99CE 4734 6117 4C25 0371 C12A -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlMFLrcACgkQYRdMJQNxwSrZXQCfSwKPuoB7uA4g7J7iszjVs7mw d18An21Fspe0mQy1zvYSKe+wsxivmn/M =4xdL -----END PGP SIGNATURE----- -- 389 users mailing list 389-users@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/389-users