Hi everyone,

I am trying to migrate our NIS services (users, autofs etc) to an LDAP server. I have found the Migration Tools from PADL (www.padl.com) and I am having a few weird problems.

When running the "migrate_all_nis_online.sh" script, I recieve the following error:

adding new entry "uid=clare,ou=People,dc=mve,dc=com"
ldap_add: Invalid syntax (21)
       additional info: objectClass: value #6 invalid per syntax

The data in question from the created ldif file is as follows:

dn: uid=clare,ou=People,dc=mve,dc=com
uid: clare
cn: Clare Bond
givenName: Clare
sn: Bond
mail: [EMAIL PROTECTED]
mailRoutingAddress: [EMAIL PROTECTED]
mailHost: islay.mve.com
objectClass: inetLocalMailRecipient
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: kerberosSecurityObject
userPassword: {crypt}<snip!>
krbName: [EMAIL PROTECTED]
loginShell: /bin/tcsh
uidNumber: 2049
gidNumber: 20
homeDirectory: /homes/clare
gecos: Clare Bond

I'm not sure exactly which value is giving the error, but after removing all the mail ones, it looks like it's one of the objectClass values. There is no white space, and the values all look right to me.

All the howtos I have read so far indicate that the "USE_EXTENDED_SCHEMA" VALUE SHOULD BE SET TO 1. However, if I set it to 0, the LDIF file gives the following data:

dn: uid=clare,ou=People,dc=mve,dc=com
uid: clare
cn: Clare Bond
objectClass: account
objectClass: posixAccount
objectClass: top
userPassword: {crypt}<snip!>
loginShell: /bin/tcsh
uidNumber: 2049
gidNumber: 20
homeDirectory: /homes/clare
gecos: Clare Bond

Then, the resulting LDIF file works properly (after a bout of deleting duplicate service informatoin) and I have an LDAP database. So the question becomes, "Do I need the extended schema?"

The relevant includes from the slapd.conf file are: core.schema, cosine.schema, inetorgperson.schema, nis.schemfa, samba.schema, autofs.schema and misc.schema. I am hoping to be able to use the LDAP server for samba authentication later on (If it ever works!) and authenticate the windows clients to the samba server., thus giving linux and windows a single user database for everything.

If anyone can help at all, I'd really appreciate it.

Thanks in advance,
Phil.

_______________________________________________
Scottish mailing list
[email protected]
https://mailman.lug.org.uk/mailman/listinfo/scottish

Reply via email to