On 2/22/19 12:42 PM, Janet Houser wrote:

Hi Folks,

I'm running DS-389 (version: 1.3.7.5 ; Build: 2018.178.1311) on a Cent OS 7 vs. 7.6.1810) system.  I've been working through the Samba & 389 Directory Server Integration https://directory.fedoraproject.org/docs/389ds/howto/howto-samba.html#stq=&stp=0 doc and I've hit a snag.   I've obtained my SID using the "net getlocalsid" command, but when I create my .ldif file (see below):

[root]# cat sambaDomainName.ldif dn: sambaDomainName=WORKGROUP,dc=test,dc=example,dc=com   (changed for security) objectclass: sambaDomain objectclass: sambaUnixIdPool objectclass: top sambaDomainName: WORKGROUP sambaSID: S-1-5-21-xxxxxxxxx-xxxxxxxx-xxxxxxx   (removed for security) uidNumber: 550 gidNumber: 550

And attempt to import it into my DS server using:

/usr/lib64/dirsrv/slapd-<name>/ldif2ldap  "cn=Directory manager" password ./sambaDomainName.ldif /usr/lib64/dirsrv/slapd-<name>/ldif2ldap  "cn=Directory manager,dc=test,dc=example,dc=com" password ./sambaDomainName.ldif

I get an error:

Options:         -Z serverID  - Server instance identifier         -D rootdn    - Directory Manager DN         -w passwd    - Directory Manager password         -f file      - File containing LDAP entries to add to the server         -P protocol  - STARTTLS, LDAPS, LDAPI, LDAP         -h           - Display usage

I tried modifying the command in various ways:

/usr/lib64/dirsrv/slapd-<name>/ldif2ldap  -D "cn=Directory Manager" -w <my DS password> -f /sambaDomainName.ldif

and I've even used the /usr/sbin/ldif2ldap executable and have only gotten errors about the usage.   From the messages it looks like I don't need the -Z server ID in the command since I have only one instance running on the server.

I'm sure I'm missing the obvious but I was hoping an experienced eye might have an easier time finding it.

Perhaps try "-Z instance_name" anyway.  I just tried on 389-ds-base-1.4.0 and it works for me, and I don't think we have changed it in a long time.

Any suggestions would be appreciated.

Thanks,

---

389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject....