Hi I am trying to run ldapmodify using a ldif file but it results in ldap_modify: Invalid syntax (21) error
# ldapmodify -D "cn=Directory Manager" -W -f PWMacis.ldif
Enter LDAP Password:
modifying entry "cn=users,cn=accounts,dc=infodetics,dc=net"
ldap_modify: Invalid syntax (21)
additional info: targetattr "pwmGUID" does not exist in schema. Please add attributeTypes "pwmGUID" to schema if necessary. ACL Syntax Error(-5):(targetattr = \22pwmGUID || pwmLastPwdUpdate || userPassword || objectClass || pwmEventLog || krbPrincipalKey\22) (target = \22ldap:///cn=users,cn=accounts,dc=infodetics,dc=net\22) (version 3.0; acl \22PWM Proxy Reset Password\22; allow (write)(userdn = \22ldap:///uid=pwmproxy,cn=users,cn=accounts,dc=infodetics,dc=net\22);)
PWMacis.ldif
==========
dn: cn=users,cn=accounts,dc=infodetics,dc=net
changetype: modify
replace: aci
aci: (targetattr = "*") (target = "ldap:///cn=users,cn=accounts,dc=infodetics,dc=net";) (version 3.0; acl "PWM Proxy Search"; allow (read,search)(userdn = "ldap:///uid=pwmproxy,cn=users,cn=accounts,dc=infodetics,dc=net";);)
aci: (targetattr = "*") (target = "ldap:///cn=users,cn=accounts,dc=infodetics,dc=net";) (version 3.0; acl "PWM Proxy Add Users"; allow (add)(userdn = "ldap:///uid=pwmproxy,cn=users,cn=accounts,dc=infodetics,dc=net";);)
aci: (targetattr = "pwmGUID || pwmLastPwdUpdate || userPassword || objectClass || pwmEventLog || krbPrincipalKey") (target = "ldap:///cn=users,cn=accounts,dc=infodetics,dc=net";) (version 3.0; acl "PWM Proxy Reset Password"; allow (write)(userdn = "ldap:///uid=pwmproxy,cn=users,cn=accounts,dc=infodetics,dc=net";);)
aci: (targetattr ="userpassword || telephonenumber || facsimiletelephonenumber || pwmResponseSet || pwmOtpSecret")(version 3.0;acl "Allow self entry modification";allow (write)(userdn = "ldap:///self";);)
>From the error message it looks like the targetattr "pwmGUID" does not exist in schema.
However i have manually copied the schema definition for the said target attributes in /etc/dirsrv/slapd-INFODETICS-NET/schema folder and restarted the LDAP service.
The ldif file for schema definition:
=========================
dn: cn=schema
objectclass: top
objectclass: ldapSubentry
objectclass: subschema
cn: schema
aci: (target="ldap:///cn=schema";)(targetattr !="aci")(version 3.0;acl "anonymous, no acis"; allow (read, search, compare) userdn = "ldap:///anyone";;)
aci: (targetattr="*")(version 3.0; acl "Configuration Administrators Group"; allow (all) groupdn="ldap:///cn=admins,cn=groups,cn=accounts,dc=infodetics,dc=net";;)
aci: (targetattr="*")(version 3.0; acl "Configuration Administrator"; allow (all) userdn="ldap:///uid=admin,cn=users,cn=accounts,dc=infodetics,dc=net";;)
aci: (targetattr = "*")(version 3.0; acl "SIE Group"; allow (all) groupdn = "ldap:///fqdn=idm.infodetics.net,cn=computers,cn=accounts,dc=infodetics,dc=net";;)
attributetypes: ( 1.3.6.1.4.1.35015.1.2.1 NAME 'pwmEventLog' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 X-ORIGIN 'user defined' )
attributetypes: ( 1.3.6.1.4.1.35015.1.2.2 NAME 'pwmResponseSet' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 X-ORIGIN 'user defined' )
attributetypes: ( 1.3.6.1.4.1.35015.1.2.3 NAME 'pwmLastPwdUpdate' SYNTAX 1.3.6.1.4.1.1466.115.121.1.24 SINGLE-VALUE X-ORIGIN 'user defined' )
attributetypes: ( 1.3.6.1.4.1.35015.1.2.4 NAME 'pwmGUID' SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE X-ORIGIN 'user defined' )
attributetypes: ( 1.3.6.1.4.1.35015.1.2.6 NAME 'pwmOtpSecret' SYNTAX 1.3.6.1.4.1.1466.115.121.1.40 X-ORIGIN 'user defined' )
objectclasses: ( 1.3.6.1.4.1.35015.1.1.1 NAME 'pwmUser' DESC '' SUP top AUXILIARY MAY ( pwmEventLog $ pwmGUID $ pwmLastPwdUpdate $ pwmResponseSet $ pwmOtpSecret ) X-ORIGIN 'user defined' )
What could be the issue ?
Regards
_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx
