You didn't try all combinations of parameters, you need to be exhaustive
when doing trial and error, otherwise there is no guarantee you get to the
right combination in a finite amount of time.  Or, you can read RFC4511
and find out how to do things right the first time.

p.

> Hi thanks for the helo I have being tryinn a few things with ldapmodify,
>
> I need to modify the user from
>  dn: uid=user1,ou=People,dc=mydomain,dc=com,
> to
>  dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com,
>
> I have try some of the following attempts
>
> dn: uid=user1,ou=People,dc=mydomain,dc=com
> changetype: modify
> replace: dn
> dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com
>
> that according to what i have read it doesnt have work, because dn is not
> exactly like an attribute
>
> dn: uid=user1,ou=People,dc=mydomain,dc=com
> changeType: modrdn
> newRDN: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com
> deleteOldRDN: 1
>
> and this ones gives me
>
> modifying rdn of entry "uid=user1,ou=People,dc=mydomain,dc=com"
> rename completed
> ldapmodify: Invalid DN syntax (34)
>         additional info: invalid new RDN
>
> I dont know how to add an ou to the dn.
>
> Thanks
>
>
>
>
>
> ----- Original Message -----
> From: "Andrey A. Konovalov" <[email protected]>
> To: [email protected]
> Sent: Friday, September 9, 2011 12:43:01 PM GMT -05:00 Colombia
> Subject: Re: Change a user dn
>
>> Hi
>>
>> I have Openldap with samba, and some users.
>> My users are part of ou=People,dc=mydomain,dc=com,
>> like this,
>> dn: uid=user1,ou=People,dc=mydomain,dc=com,
>>
>> So i wanted some of my users to be able to administer a group of users
>> and be able to create users, so a friend of mine recommended me to do
>> the following, create a group like this
>>
>> dn: cn=Admin Group1,cn=Admins,ou=People,dc=mydomain,dc=com,
>> objectClass: groupOfNames
>> objectClass: top
>> cn: Admin Group1
>> member: uid=adming1,ou=People,dc=mydomain,dc=com,
>>
>> and
>>
>> dn: ou=Group1,ou=People,dc=mydomain,dc=com
>> objectClass: organizationalUnit
>> objectClass: top
>> ou: U.A.A. Group1
>>
>> the users of this "group" whould have to be
>>
>> dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com,
>>
>>
>> And with and acl I give Admin Group1 users complete control over that
>> ou.
>>
>>
>> So this seems to work.  But I already have users that use my ldap, is it
>> possible to change their dn, I am not clear on how to do this.
>>
>> Thanks,
>>
>> Juan Diego
>>
>
>
> Maybe,
> (do it with ldapmodify, fex.)
> dn: uid=user1,dc=tratata,dc=com
> changeType: modrdn
> newRDN: user2
> deleteOldRDN: 1
>
> ???
> --
> Andrey A. Konovalov <[email protected]>
>
>
>


Reply via email to