re:How can I delete a LDAP databse to start fresh?

[Alan Womack <arwbackup@worldnet.att.net>]

Thanks for the many posts on getting rid of the old database, I was able to delete is sucessfully, but now am unable to add the initial entries to the database.

The directory /var/lib/ldap exists, but obviously there is no file there.

My error message is:

[root@Webby openldap]# ldapadd -x -h localhost -D "cn=root,dc=FAMILY,dc=com" -f base.ldif -w secret
adding new entry "dc=FAMILY,dc=org"
ldap_add: No such object

ldif_record() = 32

the base.ldif file:
dn: dc=FAMILY,dc=org
objectClass: domain
dc: FAMILY

dn: ou=Users,dc=FAMILY,dc=org
objectClass: top
objectClass: organizationalUnit
ou: Users
description: System Users

dn: ou=Groups,dc=FAMILY,dc=org
objectClass: top
objectClass: organizationalUnit
ou: Groups
description: System Groups
dn: ou=Computers,dc=FAMILY,dc=org
objectClass: top
objectClass: organizationalUnit
ou: Computers
description: Windows Domain Computers
dn: cn=Domain Admins,ou=Groups,dc=FAMILY,dc=org
objectClass: posixGroup
gidNumber: 200
cn: Domain Admins
memberUid: administrator
description: Windows Domain Users
dn: cn=Domain Users,ou=Groups,dc=FAMILY,dc=org
objectClass: posixGroup
gidNumber: 201
cn: Domain Users
description: Windows Domain Users
dn: cn=Domain Guests,ou=Groups,dc=FAMILY,dc=org
objectClass: posixGroup
gidNumber: 202
cn: Domain Guests
description: Windows Domain Guests Users
dn: cn=Administrators,ou=Groups,dc=FAMILY,dc=org
description: Members can fully administer the computer/domain
objectClass: posixGroup
gidNumber: 220
cn: Administrators
description: Windows Domain Members can fully administer the computer/domain
dn: cn=Users,ou=Groups,dc=FAMILY,dc=org
description: Ordinary users
objectClass: posixGroup
gidNumber: 221
cn: Users
description: Windows Domain Ordinary users
dn: cn=Guests,ou=Groups,dc=FAMILY,dc=org
description: Users granted guest access to the computer/domain
objectClass: posixGroup
gidNumber: 222
cn: Guests
memberUid: nobody
description: Windows Domain Users granted guest access to the computer/domain
dn: cn=Power Users,ou=Groups,dc=FAMILY,dc=org
description: Members can share directories and printers
objectClass: posixGroup
gidNumber: 223
cn: Power Users
description: Windows Domain Members can share directories and printers
dn: cn=Account Operators,ou=Groups,dc=FAMILY,dc=org
objectClass: posixGroup
gidNumber: 224
cn: Account Operators
description: Windows Domain Users to manipulate users accounts
dn: cn=Server Operators,ou=Groups,dc=FAMILY,dc=org
objectClass: posixGroup
gidNumber: 225
cn: Server Operators
description: Windows Domain Server Operators
dn: cn=Print Operators,ou=Groups,dc=FAMILY,dc=org
objectClass: posixGroup
gidNumber: 226
cn: Print Operators
description: Windows Domain Print Operators
dn: cn=Backup Operators,ou=Groups,dc=FAMILY,dc=org
objectClass: posixGroup
gidNumber: 227
cn: Backup Operators
description: Windows Domain Members can bypass file security to back up files
dn: cn=Replicator,ou=Groups,dc=FAMILY,dc=org
description: Supports file replication in a domain
objectClass: posixGroup
gidNumber: 228
cn: Replicator
description: Windows Domain Supports file replication in a domain

the slapd.conf file:

# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27 20:00:31 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/redhat/rfc822-MailMember.schema
include         /etc/openldap/schema/redhat/autofs.schema
include         /etc/openldap/schema/redhat/kerberosobject.schema
include         /etc/openldap/schema/samba.schema

database        ldbm
suffix         "dc=FAMILY, dc=com"
rootdn         "cn=root,dc=FAMILY,dc=com"
rootpw         secret
directory      /var/lib/ldap

index   objectClass,rid,uid,uidNumber,gidNumber,memberUid   eq
index   cn,mail,surname,givenname                           eq,subinitial

loglevel -1
# - The End





Epson Inkjet Printer FAQ: http://welcome.to/epson-inkjet