You didn't try all combinations of parameters, you need to be exhaustive when doing trial and error, otherwise there is no guarantee you get to the right combination in a finite amount of time. Or, you can read RFC4511 and find out how to do things right the first time.
p.
Hi thanks for the helo I have being tryinn a few things with ldapmodify,
I need to modify the user from dn: uid=user1,ou=People,dc=mydomain,dc=com, to dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com,
I have try some of the following attempts
dn: uid=user1,ou=People,dc=mydomain,dc=com changetype: modify replace: dn dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com
that according to what i have read it doesnt have work, because dn is not exactly like an attribute
dn: uid=user1,ou=People,dc=mydomain,dc=com changeType: modrdn newRDN: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com deleteOldRDN: 1
and this ones gives me
modifying rdn of entry "uid=user1,ou=People,dc=mydomain,dc=com" rename completed ldapmodify: Invalid DN syntax (34) additional info: invalid new RDN
I dont know how to add an ou to the dn.
Thanks
----- Original Message ----- From: "Andrey A. Konovalov" mudraia@list.ru To: openldap-technical@openldap.org Sent: Friday, September 9, 2011 12:43:01 PM GMT -05:00 Colombia Subject: Re: Change a user dn
Hi
I have Openldap with samba, and some users. My users are part of ou=People,dc=mydomain,dc=com, like this, dn: uid=user1,ou=People,dc=mydomain,dc=com,
So i wanted some of my users to be able to administer a group of users and be able to create users, so a friend of mine recommended me to do the following, create a group like this
dn: cn=Admin Group1,cn=Admins,ou=People,dc=mydomain,dc=com, objectClass: groupOfNames objectClass: top cn: Admin Group1 member: uid=adming1,ou=People,dc=mydomain,dc=com,
and
dn: ou=Group1,ou=People,dc=mydomain,dc=com objectClass: organizationalUnit objectClass: top ou: U.A.A. Group1
the users of this "group" whould have to be
dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com,
And with and acl I give Admin Group1 users complete control over that ou.
So this seems to work. But I already have users that use my ldap, is it possible to change their dn, I am not clear on how to do this.
Thanks,
Juan Diego
Maybe, (do it with ldapmodify, fex.) dn: uid=user1,dc=tratata,dc=com changeType: modrdn newRDN: user2 deleteOldRDN: 1
???
Andrey A. Konovalov mudraia@list.ru