--On Friday, August 24, 2007 10:59 AM -0400 Scott Lacy LACY_S@mercer.edu wrote:

Hi all,

I'm attempting to migrate an openldap implementation from a 2.0.27 server running the Red Hat Enterprise 3 rpm to a new box running the 2.3.34 Fedora 7 rpm. I'm a bit of an LDAP noob, but I've managed to account for most of the difficulties, but still have one I can't seem to get around:

There are a handful of users in the old database that have errors being migrated via ldif. These users are erroring out in their uidNumber field. These users have uidNumbers beginning with leading zeros, for example, "0001111114". I'm assuming that's a syntax no-no. I believe uidNumber is one of the fields hardcoded into Openldap now (I don't see non-commented definitions for it in any of the schema files I have). Is there a way to doctor the syntax for this field short of editing and compiling via source? It is apparently important that the leading zeros be there, else I would just take them out.

Hi Scott,

There's an interesting discussion about this somewhere I'm trying to find, but you are correct -- uidNumber should not have leading 0's, having them is broken, and you will have to remove them to get the data to import. Whatever client depends on them needs to be fixed.

Alternatively, you could create your own attribute to store that data, since those don't look like unix UID's anyway, and tell the client to read them from there instead. When I worked at Stanford, we had a university ID, which we stored in a "suUnivID" attribute. That may be similar to addressing to what you are running into.

BTW, uidNumber is defined in nis.schema, but as you noted, hard coded into slapd.

--Quanah

--

Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration