Okay, so you need to create the domain objects then. I'm not sure your ldapadd file is
correct though, I think you need a blank line between the two entries?
On 24 Sep 2019, at 12:55, rtbell(a)GRANITEMOUNTAIN.COM wrote:
William,
The result was the same except that the base was <dc=granitemountain, dc=com> with
scope subtree instead of <dc=granitemountain,> with scope subtree
Bob
-----Original Message-----
From: William Brown [mailto:wbrown@suse.de]
Sent: Monday, September 23, 2019 20:43
To: 389-users(a)lists.fedoraproject.org
Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
You need to quote it because else the shell thinks it's two arguments?
> On 24 Sep 2019, at 12:31, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
>
> William -
>
> I did it with this command:
> ldapsearch -b dc=granitemountain, dc=com -h $HOSTNAME -x -D
> 'cn=Directory Manager' -W
>
> The results were:
> # extended LDIF
> #
> # LDAPv3
> # base <dc=granitemountain,> with scope subtree # filter: dc=com #
> requesting: ALL #
>
> # search: results
> search: 2
> result: 32 No such object
>
> # numResponses: 1
>
> I am not sure what the ',' is doing in the base definition
> [<dc=granitemountain,>]
>
>
> Bob
>
> -----Original Message-----
> From: William Brown [mailto:wbrown@suse.de]
> Sent: Monday, September 23, 2019 19:37
> To: 389-users(a)lists.fedoraproject.org
> Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
>
> Can you do an ldapsearch -b dc=granitemountain, dc=com -h ... -x -D ... -W and see
what exists already?
>
>> On 24 Sep 2019, at 10:39, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
>>
>> William,
>>
>> I was trying it as you suggested. It now gets past the password issue. However, I
am not hitting another roadblock.
>>
>> The original entries in the file I created are:
>> dn: dc=granitemountain, dc=com
>> objectClass: domain
>> dc: granitemountain
>> dn: dc=pki, dc=granitemountain, dc=com
>> objectClass: domain
>> dc: pki
>>
>> When I created the file (without the leading tabs of course) I then used the
command:
>> ldapadd -f /tmp/ldapadd-file -h $HOSTNAME -x -D 'cn=Directory Manager'
>> -W as you suggested.
>>
>> That got me past the password issue. Now however, it created the
>> first record (for the granitemountain domain) but it now issues a new error.
>> The transcript is
>>
>> Adding new entry "dc=pki", dc=granitemountain, dc=com"
>> Ldap_add: No such object (32)
>>
>> Any thoughts?
>>
>> Bob
>>
>> -----Original Message-----
>> From: William Brown [mailto:wbrown@suse.de]
>> Sent: Monday, September 23, 2019 18:20
>> To: 389-users(a)lists.fedoraproject.org
>> Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
>>
>> Can you try the -f /file/of/changes rather than redirecting into the command?
>>
>>> On 24 Sep 2019, at 10:16, rtbell(a)GRANITEMOUNTAIN.COM wrote:
>>>
>>> William, thanks for responding. In the original command string I used -w
redhat123 instead of -W which causes a prompt for the password. In both cases, I got the
same error.
>>>
>>> -----Original Message-----
>>> From: William Brown [mailto:wbrown@suse.de]
>>> Sent: Monday, September 23, 2019 18:12
>>> To: 389-users(a)lists.fedoraproject.org
>>> Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
>>>
>>>
>>>
>>>> On 24 Sep 2019, at 09:46, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
>>>>
>>>> I have hit a roadblock and would appreciate any help I can get. I am
running in a VM Workstation virtualization platform on a Windows 10 host machine.
>>>>
>>>> I created a LAMP version of Fedora 30 using mariadb instead of mysql. I
changed the host name to
cn-poc-pki.granitemountain.com rebooted the system and verified
that the host name was correct. I added
cn-poc-pki.granitemountain.com to the hosts table
and rebooted again. I then used dnf install 389-ds-base to retrieve the 389-ds subsystem.
I used dscreate create-template ds.tmp to create a template. I used vim to update the
fields in the template file I am attaching the template file.
>>>>
>>>> When I try to assert an ldapadd –h $HOSTNAME –x –D “cn=DirectoryManager”
–W <<EOF with a number of additional parameters, I get an ldap_bind: Invalid
credentials (49) error message. Obviously I have misconfigured something but I have been
unable to discover what it might be. Could some of you experts please look at my
configuration and tell me what I screwed up, please?
>>>
>>> Hey there,
>>>
>>> I wonder if you try something like:
>>>
>>> ldapadd -f /path/to/file/of/changes -h $HOSTNAME -x -D 'cn=Directory
>>> Manager' -W
>>>
>>> If that works.
>>>
>>> I think that -W prompts, so right now you are echoing your changes as the
password perhaps.
>>>
>>> Hope that helps
>>>
>>>>
>>>> Bob Bell
>>>>
>>>> Granite Mountain Security Consultancy, LLC.
>>>> 90 W 500 South, #404
>>>> Bountiful UT 84010
>>>>
>>>> 801-971-4200 (cell)
>>>> rtbell(a)granitemountain.com
>>>>
>>>> "Beware the engineers of society, I say, who would make everyone in
>>>> all the world equal.
>>>> Opportunity should be equal, must be equal, but achievement must
>>>> remain individual.”
>>>> ---Drizzt Do’Urden
>>>>
>>>>
>>>>
>>>> <ds.tmp>_______________________________________________
>>>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>>>> unsubscribe send an email to
>>>> 389-users-leave(a)lists.fedoraproject.org
>>>> Fedora Code of Conduct:
>>>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>>>> List Guidelines:
>>>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>>> List Archives:
>>>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedor
>>>> a
>>>> p
>>>> r
>>>>
oject.org
>>>
>>> —
>>> Sincerely,
>>>
>>> William Brown
>>>
>>> Senior Software Engineer, 389 Directory Server SUSE Labs
>>> _______________________________________________
>>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>>> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>>> Fedora Code of Conduct:
>>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>>> List Guidelines:
>>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>> List Archives:
>>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedora
>>> p r
oject.org _______________________________________________
>>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>>> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>>> Fedora Code of Conduct:
>>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>>> List Guidelines:
>>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>> List Archives:
>>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedora
>>> p
>>> r
>>>
oject.org
>>
>> —
>> Sincerely,
>>
>> William Brown
>>
>> Senior Software Engineer, 389 Directory Server SUSE Labs
>> _______________________________________________
>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines:
>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorap
>> r
oject.org _______________________________________________
>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines:
>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorap
>> r
>>
oject.org
>
> —
> Sincerely,
>
> William Brown
>
> Senior Software Engineer, 389 Directory Server SUSE Labs
> _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorapr
>
oject.org _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorapr
>
oject.org
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server SUSE Labs
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org To unsubscribe send an email
to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server
SUSE Labs