2011/1/12 Pierangelo Masarati
<masarati@aero.polimi.it>
gael therond wrote:
Is it possible to add a domain on an already existing root?
I got the following root for now:
dc=lab,dc=corp
and I want to create a second Top entry on my root which will be named like
this:
dc=prod,dc=corp
Is that possible?
It is possible, but it might not be desirable. In principle, you need to define "dc=prod, dc=corp" as an additional suffix for the database, something like
<existing>
database <type>
#...
suffix "dc=lab,dc=corp"
</existing>
<new1>
database <type>
#...
suffix "dc=lab,dc=corp"
suffix "dc=prod,dc=corp"
</new1>
However, as far as I remember, back-bdb and back-hdb only support this when compiled with a special #define, and at some performance cost. A more straightforward solution would be to define
<new1>
database <type>
#...
suffix "dc=corp"
</new1>
and then add "dc=corp" as the root entry, and "dc=lab,dc=corp" and "dc=prod,dc=corp" as regular children entries of it.
I've try the following syntaxe without succes.
Racine.ldif:
#Racine
dn: dc=prod, dc=corp
ObjectClass: Top
ObjectClass: dcObject
ObjectClass: organization
o: prod.corp
dc: prod
#OU Groups
dn: ou=groups, dc=prod, dc=geka
ObjectClass: organizationalUnit
ObjectClass: top
ou: groups
#OU Users
dn: ou=users, dc=prod, dc=geka
ObjectClass: organizationalUnit
ObjectClass: top
ou: users
And then I've done the usual LdapADD command, but with the following error
returned:
ldap_add: Server is unwilling to perform (53)
Additional info: No global Superior Knowledge.
Well, my guest is that I didn't set correctly Slapd because my default root
is lab.corp instead of being TLD .corp
Is that theory right?
It is not clear from the message what entry failed. I assume it was "dc=prod,dc=corp" because it is not within the database's naming context. However the subsequent entries would be incorrect as well, becuase "dc=geka" is not within the "dc=corp" naming context.
p.
Many thanks,
As you said, I've re-read the manual and yes it's recommend to use a new database entry.
Once again, you're right I'm using the BDB backend on my LDAP.
Your last solution is exactly what I'm looking for, have a root named Corp and two distinct children named Lab and Prod As we done with Active Directory (One forest with multiple domain on it).
Many thanks Once Again.
Problem Solved!!