Samba & 389 Directory Server Integration

Janet Houser <houser@xxxxxxx> · Fri, 22 Feb 2019 10:42:26 -0700



    Hi Folks,

      
      I'm running DS-389 (version: 1.3.7.5 ; Build: 2018.178.1311) on a
      Cent OS 7 vs. 7.6.1810) system.  I've been working

      through the  Samba
          & 389 Directory Server Integration doc and I've
      hit a snag.   I've obtained my SID using the "net getlocalsid" 

      command, but when I create my .ldif file (see below):

      
    [root]# cat sambaDomainName.ldif 

    dn: sambaDomainName=WORKGROUP,dc=test,dc=example,dc=com   (changed
    for security)

    objectclass: sambaDomain

    objectclass: sambaUnixIdPool

    objectclass: top

    sambaDomainName: WORKGROUP

    sambaSID: S-1-5-21-xxxxxxxxx-xxxxxxxx-xxxxxxx   (removed for
    security)

    uidNumber: 550

    gidNumber: 550

    
    And attempt to import it into my DS server using:

    
    /usr/lib64/dirsrv/slapd-<name>/ldif2ldap  "cn=Directory
    manager" password ./sambaDomainName.ldif

    /usr/lib64/dirsrv/slapd-<name>/ldif2ldap  "cn=Directory
    manager,dc=test,dc=example,dc=com" password ./sambaDomainName.ldif

    
    I get an error:

    
    Options:

            -Z serverID  - Server instance identifier

            -D rootdn    - Directory Manager DN

            -w passwd    - Directory Manager password

            -f file      - File containing LDAP entries to add to the
    server

            -P protocol  - STARTTLS, LDAPS, LDAPI, LDAP

            -h           - Display usage

    
    I tried modifying the command in various ways:

    
    /usr/lib64/dirsrv/slapd-<name>/ldif2ldap  -D "cn=Directory
    Manager" -w <my DS password> -f /sambaDomainName.ldif

    
    and I've even used the /usr/sbin/ldif2ldap executable and have only
    gotten errors about the usage.   From the messages it looks like I

    don't need the -Z server ID in the command since I have only one
    instance running on the server.

    
    I'm sure I'm missing the obvious but I was hoping an experienced eye
    might have an easier time finding it.

    
    Any suggestions would be appreciated.

    
    Thanks,

  
_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx