R: Really confusing responses (was: Re: Can't slapadd ldif file)

["Luca Scamoni" <luca.scamoni@sys-net.it>]

Todd answered the first two questions. About the third one I guess you have
a suffix in your slapd.conf like 'dc=example,dc=com,c=US'. The scripts are
trying to add an entry dc=example,dc=com. See the difference (c=US)? You
must stick to the root DN if you want LDAP being able to add something to
the tree.

-----Messaggio originale-----
Da: owner-openldap-software@OpenLDAP.org
[mailto:owner-openldap-software@OpenLDAP.org]Per conto di Phil Dibowitz
Inviato: giovedi 5 dicembre 2002 01:29
A: openldap-software@OpenLDAP.org
Oggetto: Re: Really confusing responses (was: Re: Can't slapadd ldif
file)


OK, I've made much progress, 4 howtos were posted that were much better
than the two I was using.

But I'm a little confused on a few things:

1. I've managed to import a few entries which can be seen fine through
slapcat. Why is it that this can be done without a password?

2. I can't search with ldap search. Here's a bit of my slapcat output:

-------------------------------------------
dn: ou=groups,dc=example,dc=com,c=US
objectClass: top
objectClass: organizationalUnit
ou: groups

dn: cn=phil,ou=groups,dc=example,dc=com,c=US
objectClass: top
objectClass: posixGroup
cn: phil
gidNumber: 100
memberUid: phil

dn: ou=people,dc=example,dc=com,c=US
objectClass: top
objectClass: organizationalUnit
ou: people

dn: dc=example,dc=com,c=US
objectClass: top
objectClass: organization
o: example.com
-------------------------------------------

# ldapsearch -b 'ou=groups,dc=example,dc=com,c=US' 'objectclass=*'
ldap_sasl_interactive_bind_s: No such attribute

Why not?

3. I think this is more or less the same problem as with #2 above, but,
when I attempt to use the migration scripts, I get:

------------------------------
adding new entry "dc=example,dc=com"
ldap_add: No such object

ldif_record() = 32
Importing into LDAP...
adding new entry "ou=People,dc=example,dc=com"
ldap_add: No such object

ldif_record() = 32
/usr/bin/ldapadd: returned non-zero exit status
------------------------------

And looking at the migrate_all_online script, it seems to add all
necessary 'parent' entries, so that shouldn't be a problem.

Thanks,
--
Phil Dibowitz                             phil@ipom.com
Freeware and Technical Pages              Insanity Palace of Metallica
http://home.earthlink.net/~jaymzh666/     http://www.ipom.com/

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
  - Benjamin Franklin, 1759