[Freeipa-users] Re: Need help with confusing query results

Hi Thierry, I commented on the issue and posted the link to the script I made on GitHub. Thanks ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora

[Freeipa-users] Re: Need help with confusing query results

Hi Edward, thank you so much diving up to the RC. I opened https://github.com/389ds/389-ds-base/issues/5158 to track that issue regards thierry On 2/9/22 1:29 AM, Edward Valley via FreeIPA-users wrote: Hi, Finally, I made a bash script that: 1. Receives as arguments a 'base' and a

[Freeipa-users] Re: Need help with confusing query results

Hi, Finally, I made a bash script that: 1. Receives as arguments a 'base' and a 'filter' (like the fix-up task) 2. Search for incomplete entries (no entryUUID attribute) 3. Patch dirsrv schema (99user.ldif) to make entryUUID attribute mutable (Removes NO-USER-MODIFICATION) 4. Restarts dirsrv

[Freeipa-users] Re: Need help with confusing query results

Hi Thierry, Here it go... ldapsearch -LLL -o ldif-wrap=no -h localhost -x \ -D "cn=Directory Manager" -w "..." \ -b "cn=users,cn=accounts,dc=..." \ '(uid=user1)' nscpentrywsi nscpentrywsi: cn;vucsn-5d77decd0004: Test User 1 nscpentrywsi:

[Freeipa-users] Re: Need help with confusing query results

On 2/1/22 6:50 AM, Edward Valley via FreeIPA-users wrote: Hi Thierry, Do you want the output of: ldapsearch -LLL -h localhost -x -D "cn=Directory Manager" -w "..." \ -b "cn=users,cn=accounts,dc=..." '(uid=user1)' '*' Or are you talking about something else? Hi, yes that is this exact

[Freeipa-users] Re: Need help with confusing query results

Hi Thierry, Do you want the output of: ldapsearch -LLL -h localhost -x -D "cn=Directory Manager" -w "..." \ -b "cn=users,cn=accounts,dc=..." '(uid=user1)' '*' Or are you talking about something else? Thanks ___ FreeIPA-users mailing list --

[Freeipa-users] Re: Need help with confusing query results

Hi Edward, It is looking the fixup task stop upon the first error. I do not know if it is intentional or a bug. The error is possibly related to schema checking, could you send the ldif format of entry 'uid=user1, cn=users,...' ? regards thierry On 1/29/22 11:36 PM, Edward Valley via

[Freeipa-users] Re: Need help with confusing query results

Hi Thierry, Manually creating the task makes it run, but not with the expected result: DATE_NOW="$(date +%s)" ldapmodify -h localhost -D "cn=Directory Manager" -w "..." -a < fixup failed -> uid=user1,cn=users,cn=accounts,dc=... Operation [...] - INFO - plugins/entryuuid/src/lib.rs:182 -

[Freeipa-users] Re: Need help with confusing query results

Hi Edward, I think you may try to create the task manually ldapmodify -D "cn=directory manager" -w ... -a <,cn=entryuuid task,cn=tasks,cn=config objectClass: top objectClass: extensibleObject basedn: cn: entryuuid_fixup_ ! If you want to fixup only specific entries you many add the following

[Freeipa-users] Re: Need help with confusing query results

Hi, Thanks for the tip. Any workaround in the mean time? I couldn't find one. Thanks ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora Code of Conduct:

[Freeipa-users] Re: Need help with confusing query results

Hi, the issue with "dsconf plugin entryuuid fixup" is a known issue, see *Bug 2036672* - Based on 1944494 (RFC 4530 entryUUID attribute) - plugin entryuuid failing HTH, flo On Thu, Jan 27, 2022 at 5:53 AM Edward Valley via FreeIPA-users <

[Freeipa-users] Re: Need help with confusing query results

Hi, I realized that only users created after certain date has an entryUUID attribute, so query results are not confusing anymore, and as I can see it now, in the process of hiding private information, my first post is somehow misleading. Sorry about that. From the dnf logs on my system, I can

[Freeipa-users] Re: Need help with confusing query results

Hi, That setting was already set to 'off' # dsconf localhost config get nsslapd-ignore-virtual-attrs nsslapd-ignore-virtual-attrs: off # dsconf localhost config replace nsslapd-ignore-virtual-attrs=on Successfully replaced "nsslapd-ignore-virtual-attrs" # dsconf localhost config get

[Freeipa-users] Re: Need help with confusing query results

Hi Edward, would you run 'dsconf localhost config get nsslapd-ignore-virtual-attrs' and check its value. It should be 'on'. Would you retry the same search after  setting it to 'off'  ? thanks thierry On 1/24/22 10:16 PM, Edward Valley via FreeIPA-users wrote: This is the version

[Freeipa-users] Re: Need help with confusing query results

This is the version installed: 389-ds-base-1.4.3.23-12.module+el8.5.0+722+e2a0b219.x86_64 Thanks ___ FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org Fedora

[Freeipa-users] Re: Need help with confusing query results

Hi, I'm not able to reproduce the issue on fedora 35: # ldapsearch -LLL -H ldap://`hostname`:389 -x -D cn=directory\ manager -w Secret123 -b cn=users,cn=accounts,dc=ipa,dc=test -s sub "(&(objectClass=inetOrgPerson)(uid=testuser1))" uid entryUUID dn: