On Fri, 30 Oct 2015, Troels Hansen wrote:


This means the task has finished already.

You can run a new one to see if it reports something detailed about the
DNs it couldn't process.



Hmm, this is weird:

I have created a task:
10-task-sidgen-run.update

containing:

dn: cn=$TIME-$FQDN-$LIBARCH,cn=ipa-sidgen-task,cn=tasks,cn=config
add:objectclass:top,extensibleObject
add:cn:$TIME-$FQDN-$LIBARCH
add:basedn:"cn=accounts,$SUFFIX"
add:ttl:3600
add:delay:0
I think it should be add:nsslapd-basedn: cn=accounts,$SUFFIX not add:basedn:"cn=accounts,$SUFFIX"

this is what sidgen task expects and it returns constraint violation
error if parameters are wrong:

   str = fetch_attr(e, "nsslapd-basedn", NULL);
   if (str == NULL) {
       LOG_FATAL("Missing nsslapd-basedn!\n");
       *returncode = LDAP_CONSTRAINT_VIOLATION;
       ret = SLAPI_DSE_CALLBACK_ERROR;
       goto done;
   }


--
/ Alexander Bokovoy

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project

Reply via email to