Chris,

not I did not try that. Mostly because I think moving expresses the actual operation more clearly in LDIF.

But in the mean time I edited the config LDIF (cutting and pasting the object, then adjusting the DN.

I wonder whether the problem might be that the new RDN is the same as the old RDN 😉

Kind regards,

Ulrich Windl

From: Christopher Paul <chris.paul@rexconsulting.net>
Sent: Thursday, March 20, 2025 4:22 PM
To: Windl, Ulrich <u.windl@ukr.de>; openldap-technical@openldap.org
Subject: [EXT] Re: LDIF for moddn: "ldap_rename: Server is unwilling to perform (53)"

On 3/20/2025 8:16 AM, Windl, Ulrich wrote:

Hi!

Reading https://kb.symas.com/en_US/configuration/configure-delta-syncrepl I realized that my syncprov is on the original database, not on the accesslog.

So I tried to fix it my “moving” the overlay like this:

dn: olcOverlay={0}syncprov,olcDatabase={0}config,cn=config

changetype: moddn

newrdn: olcOverlay={0}syncprov

deleteoldrdn: 1

newsuperior: olcDatabase={3}mdb,cn=config

However as I got  "ldap_rename: Server is unwilling to perform (53)" I wonder:

Is my LDIF wrong, or is it an implementation restriction?

Hi Ulrich,

Did you try delete + add?

dn: olcOverlay={0}syncprov,olcDatabase={0}config,cn=config
changetype: delete

dn: olcOverlay=syncrpov,olcDatabase={3}mdb,cn=config
changetype: add
...[etc]...

-- 
Chris Paul | Rex Consulting | https://www.rexconsulting.net