On 03/04/2015 10:53 AM, Noriko Hosoi wrote:
Well, it is an error message issue... You cannot "delete" your suffix. 
Sorry, please iignore this statement.  I could delete it.  Continue investigating...

BTW, could you run this command line again replacing  numbsubordinates with numsubordinates?
> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld" -W "(objectclass=*)" numsubordinates

Thanks,
--noriko
To do so, you need to delete the backend togather.

$ ldapsearch -LLLx ... -b "dc=example,dc=com" -s base "(objectclass=*)" dn
dn: dc=example,dc=com

$ ldapdelete -x ...
dc=example,dc=com
ldap_delete: Operation not allowed on non-leaf (66)


On 03/04/2015 03:50 AM, Christian Katterl wrote:
Hi,

ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld" "(objectclass=nsTombstone)" -W

# extended LDIF
#
# LDAPv3
# base <dc=test,dc=mydomain,dc=tld> with scope subtree
# filter: (objectclass=nsTombstone)
# requesting: ALL
#

# search result
search: 2
result: 0 Success

# numResponses: 1


and...

ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld" -W "(objectclass=*)" numbsubordinates

# extended LDIF
#
# LDAPv3
# base <dc=test,dc=mydomain,dc=tld> with scope subtree
# filter: (objectclass=*)
# requesting: numbsubordinates
#

# test.mydomain.tld
dn: dc=test,dc=mydomain,dc=tld

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1


BR, Christian




Am 04.03.2015 11:59, schrieb German Parente:
Hi Christian,

there has been a bug fixed for your issue but in release 1.2.11.15-34.

https://fedorahosted.org/389/ticket/47367


Could you do this query ?

ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
"(objectclass=nsTombstone)" -W

and also

ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
-W "(objectclass=*)" numbsubordinates

?

Thanks and regards,

German.



----- Original Message -----
From: "Christian Katterl" <christian@katterl.eu>
To: 389-users@lists.fedoraproject.org
Sent: Wednesday, 4 March, 2015 9:30:39 AM
Subject: [389-users] Cannot delete domain

Dear all,

I am using 389-ds version 1.2.11.30-1 (shipped with kolab).
Trying to delete a domain gives the following error: ldap_delete:
Operation not allowed on non-leaf (66)

Is this a (known) bug, or am I doing something wrong?

I tried to delete the domain using:
ldapdelete -c -x -D "cn=Directory Manager" -W -r
"dc=test,dc=mydomain,dc=tld"

When I am looking for entries, there seems to be no remaining element:

ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
"(objectclass=*)" -W

# extended LDIF
#
# LDAPv3
# base <dc=test,dc=mydomain,dc=tld> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# test.mydomain.tld
dn: dc=test,dc=mydomain,dc=tld
dc: test
objectClass: top
objectClass: domain

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

I replaced my real domain-name with test.mydomain.tld

The installation is a single ldap-host with no synchronization or so...
Can anyone help?

BR, Christian
-- 
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
-- 
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
-- 
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users