On 08/16/2011 10:20 AM, Michael Kershaw wrote:
All, I've currently been tasked with migrating the contents of a contained ldap environment running openldap-2.1 to a new development server running sles11 with openldap-2.3.37. I've begun to populate the new environment, but have hit an "Invalid DN syntax" error that I'm not quite sure how to get around yet.
You might consider using a newer version. The 2.4.x versions of OpenLDAP have treated us well. If your distro of choice doesn't offer a pre-compiled OpenLDAP that's a fairly recent version, compiling from source isn't that difficult.
In the past, when I've upgraded OpenLDAP (particularly, when the newer version was built with a newer version of BerkeleyDB) and I was worried about binary data file compatibility, I've used slapcat and slapadd to copy database contents, rather than ldapadd.
Hit the man pages for slapcat and slapadd on your systems to be sure, but if memory serves, you'd just want to this on your old LDAP server:
cd <whatever-dir-contains-your-db-files> slapcat -f <your-slapd.conf-file> >/var/tmp/backup.ldif Then copy the resulting ldif file to your new server and do: cd <whatever-dir-will-contain-your-db-files> slapadd -f <your-slapd.conf-file> < /var/tmp/backup.ldif Then startup the new slapd using the freshly generated database files. Brent
I'm new to ldap from a server point
of view, so I'm learning as I chug through this.
This piece is what's in the existing 2.1:
dn: group-name=EDI Technician,ou=group,ou=edi,dc=coat,dc=com
objectClass: group-roles
group-name: EDI Technician
roles: EDI Technician
And when I go to add:
ldapadd -x -W -D "cn=edi_admin,ou=edi,dc=coat,dc=com" -f ./edi-tech_roles.ldif
Enter LDAP Password:
adding new entry "group-name=EDI Technician,ou=group,ou=edi,dc=coat,dc=com"
ldap_add: Invalid DN syntax (34)
additional info: invalid DN
Is it the "group-name" that's no longer valid syntax? If so, is there
an equivalent?
Any help is appreciated!
Mike