Hi it me again. This time im attempting a connection between 2 openldap servers.
Im getting the following error:

ERROR - Error while adding entry uid=user1,ou=Users in directory :
javax.naming.directory.SchemaViolationException: [LDAP: error code 65 - object class 'organizationalPerson' requires attribute 'sn'
]; remaining name
'uid=user1,ou=Users'

ERROR - Error while synchronizing ID uid=user1,ou=Users: java.lang.Exception:
Technical problem while applying modifications to directory
dn: uid=user1,ou=Users,dc=volder,dc=com
changetype: add

uid : user1
objectClass: organizationalPerson
objectClass:person
objectClass: top

And this is the configuration lsc.properties:

##############################
Destination LDAP directory
##############################

dst.java.naming.provider.url = ldap://192.168.1.3:389/dc=volder,dc=com
dst.java.naming.security.authentication = simple
dst.java.naming.security.principal = uid=root,ou=users,dc=volder,dc=com
dst.java.naming.security.credentials = 11111
dst.java.naming.referral = ignore
dst.java.naming.ldap.derefAliases = never
dst.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory
dst.java.naming.ldap.version = 3

#########################
Source LDAP directory
#########################

src.java.naming.provider.url = ldap://192.168.1.2:389/dc=volder,dc=com
src.java.naming.security.authentication = simple
src.java.naming.security.principal = uid=root,ou=users,dc=volder,dc=com
src.java.naming.security.credentials = 11111
src.java.naming.referral = ignore
src.java.naming.ldap.derefAliases = never
src.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory
src.java.naming.ldap.version = 3

#######################
Tasks configuration
#######################

lsc.tasks = Administrator
lsc.tasks.Administrator.srcService = org.lsc.jndi.SimpleJndiSrcService
lsc.tasks.Administrator.srcService.baseDn = ou=users
lsc.tasks.Administrator.srcService.filterAll = (&(objectClass=person))
lsc.tasks.Administrator.srcService.pivotAttrs = uid
lsc.tasks.Administrator.srcService.filterId = (&(objectClass=person)(uid={uid}))
lsc.tasks.Administrator.srcService.attrs = description uid userPassword

lsc.tasks.Administrator.dstService = org.lsc.jndi.SimpleJndiDstService
lsc.tasks.Administrator.dstService.baseDn = cn=Users
lsc.tasks.Administrator.dstService.filterAll = (&(uid=*)(objectClass=organizationalPerson)) lsc.tasks.Administrator.dstService.pivotAttrs = uid, top, person, user, organizationalPerson lsc.tasks.Administrator.dstService.filterId = (&(objectClass=person) (uid={uid})) lsc.tasks.Administrator.dstService.attrs = description uid userPassword objectClass

lsc.tasks.Administrator.bean = org.lsc.beans.SimpleBean
lsc.tasks.Administrator.dn = "uid=" + srcBean.getAttributeValueById("uid") + ",ou=Users,dc=volder,dc=com"

dn.real_root = dc=volder,dc=com

#############################
Syncoptions configuration
#############################

lsc.syncoptions.Administrator = org.lsc.beans.syncoptions.PropertiesBasedSyncOptions
lsc.syncoptions.Administrator.default.action = M
lsc.syncoptions.Administrator.objectClass.action = M
lsc.syncoptions.Administrator.objectClass.force_value = srcBean.getAttributeValueById("uid").toUpperCase() lsc.syncoptions.Administrator.userPassword.default_value = SecurityUtils.hash(SecurityUtils.HASH_SHA1, "defaultPassword")
lsc.syncoptions.Administrator.default.delimiter=;
lsc.syncoptions.Administrator.objectClass.force_value = "top";"person";"organizationalPerson" lsc.syncoptions.Administrator.userPrincipalName.force_value = srcBean.getAttributeValueById("uid") + "@volder.com" lsc.syncoptions.Administrator.userAccountControl.create_value = AD.userAccountControlSet ( "0", [AD.UAC_SET_NORMAL_ACCOUNT])


My Ldap is set that for every user to have a sn and cn on both directories, source/destination. Where do i have to declare them?

Regards
Bernard


_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
[email protected]
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to