Can you do an ldapsearch -b dc=granitemountain, dc=com -h ... -x -D ... -W and see what
exists already?
On 24 Sep 2019, at 10:39, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
William,
I was trying it as you suggested. It now gets past the password issue. However, I am not
hitting another roadblock.
The original entries in the file I created are:
dn: dc=granitemountain, dc=com
objectClass: domain
dc: granitemountain
dn: dc=pki, dc=granitemountain, dc=com
objectClass: domain
dc: pki
When I created the file (without the leading tabs of course) I then used the command:
ldapadd -f /tmp/ldapadd-file -h $HOSTNAME -x -D 'cn=Directory Manager' -W
as you suggested.
That got me past the password issue. Now however, it created the first record (for the
granitemountain domain) but it now issues a new error. The transcript is
Adding new entry "dc=pki", dc=granitemountain, dc=com"
Ldap_add: No such object (32)
Any thoughts?
Bob
-----Original Message-----
From: William Brown [mailto:wbrown@suse.de]
Sent: Monday, September 23, 2019 18:20
To: 389-users(a)lists.fedoraproject.org
Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
Can you try the -f /file/of/changes rather than redirecting into the command?
> On 24 Sep 2019, at 10:16, rtbell(a)GRANITEMOUNTAIN.COM wrote:
>
> William, thanks for responding. In the original command string I used -w redhat123
instead of -W which causes a prompt for the password. In both cases, I got the same error.
>
> -----Original Message-----
> From: William Brown [mailto:wbrown@suse.de]
> Sent: Monday, September 23, 2019 18:12
> To: 389-users(a)lists.fedoraproject.org
> Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
>
>
>
>> On 24 Sep 2019, at 09:46, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
>>
>> I have hit a roadblock and would appreciate any help I can get. I am running in a
VM Workstation virtualization platform on a Windows 10 host machine.
>>
>> I created a LAMP version of Fedora 30 using mariadb instead of mysql. I changed
the host name to
cn-poc-pki.granitemountain.com rebooted the system and verified that the
host name was correct. I added
cn-poc-pki.granitemountain.com to the hosts table and
rebooted again. I then used dnf install 389-ds-base to retrieve the 389-ds subsystem. I
used dscreate create-template ds.tmp to create a template. I used vim to update the fields
in the template file I am attaching the template file.
>>
>> When I try to assert an ldapadd –h $HOSTNAME –x –D “cn=DirectoryManager” –W
<<EOF with a number of additional parameters, I get an ldap_bind: Invalid
credentials (49) error message. Obviously I have misconfigured something but I have been
unable to discover what it might be. Could some of you experts please look at my
configuration and tell me what I screwed up, please?
>
> Hey there,
>
> I wonder if you try something like:
>
> ldapadd -f /path/to/file/of/changes -h $HOSTNAME -x -D 'cn=Directory
> Manager' -W
>
> If that works.
>
> I think that -W prompts, so right now you are echoing your changes as the password
perhaps.
>
> Hope that helps
>
>>
>> Bob Bell
>>
>> Granite Mountain Security Consultancy, LLC.
>> 90 W 500 South, #404
>> Bountiful UT 84010
>>
>> 801-971-4200 (cell)
>> rtbell(a)granitemountain.com
>>
>> "Beware the engineers of society, I say, who would make everyone in
>> all the world equal.
>> Opportunity should be equal, must be equal, but achievement must
>> remain individual.”
>> ---Drizzt Do’Urden
>>
>>
>>
>> <ds.tmp>_______________________________________________
>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines:
>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorap
>> r
>>
oject.org
>
> —
> Sincerely,
>
> William Brown
>
> Senior Software Engineer, 389 Directory Server SUSE Labs
> _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorapr
>
oject.org _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorapr
>
oject.org
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server SUSE Labs
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org To unsubscribe send an email
to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server
SUSE Labs