Re: Migrating from Netscape DS 3.1 to Openldap

["Lon Tierney" <ltierney@mykungfuisthebest.net>]

Odds are that your schema is incorrect for what you exported from NS. I
would check to ensure that you have an "aci" attribute in your schema.
OpenLDAP doesn't set ACIs the same way as NS, so you can probably just
remve all references to "aci" attributes from your LDIF.

To make your life easier, I would suggest that you check to ensure that
all the attributes and objectclasses are in your current working schema.
If not, add them in as necessary.

-lon


> Greetings,
>
> I've been trying to import a Netscape Directory Server 3.1 ldif file
> into openldap 2.1.21 using this command:
>
> slapadd -v -l ldif_file
>
> I get this error:
> slapadd: could not parse entry (line=8)
>
> I've noticed there are some differences with this ldif file and the
> ldif format that is commonly recognized.
>
> Are there any utilities to convert a Netscape DS 3.1 ldif file to one
> that is recognized by openldap?
>
> Below are the contents of the first few lines of the ldif_file:
>
> o=Example.com
> objectclass=top
> objectclass=organization
> o=Example.com
> aci=(target="ldap:///o=Example.com";) (targetattr = "*")(version 3.0;
> acl "Allow self entry modification"; allow (write) userdn =
> "ldap:///self";;) aci=(target="ldap:///o=Example.com";) (targetattr !=
> "userPassword") (version 3.0; acl "Anonymous access"; allow (read,
> search, compare) userdn = "ldap:///anyone";;)
> aci=(target="ldap:///o=Example.com";) (targetattr = "*")(version 3.0;
> acl "Suitespot Adminstrators Group"; allow (all) groupdn =
> "ldap:///cn=Administrators,o=Example.com";;)
>
> cn=Administrators,o=Example.com
> objectclass=top
> objectclass=groupofuniquenames
> cn=Administrators
> uniquemember=uid=admin,o=Example.com
>
> uid=admin,o=Example.com
> objectclass=top
> objectclass=person
> objectclass=organizationalperson
> objectclass=inetorgperson
> cn=SuiteSpot Administrator
> sn=Administrator
> givenname=SuiteSpot
> uid=admin
> userpassword={SHA}+EKIfdhg9r423lAt+dsDepPPDjw4M=
>
> ou=Netscape Servers,o=Example.com
> objectclass=top
> objectclass=organizationalunit
> ou=Netscape Servers
>
> Any insight would helpful.
>
> TIA,
> Scott