Hi list,<div><br></div><div>I am fighting with openldap for some time now and I can&#39;t get it to work. </div><div><br></div><div>I started clean.</div><div>I&#39;ve followed this tutorial, and everything works fine.</div>
<div><br></div><div>I used followed the example and only changed <span class="Apple-style-span" style="font-family:monospace;white-space:pre-wrap;font-size:medium">dc=company,dc=com into dc=mycompany,dc=org.</span></div><div>
<span class="Apple-style-span" style="font-family:monospace;white-space:pre-wrap;font-size:medium"><br></span></div><div>Then I want to import this file, because I am busy with a WebSphere book from Packtpub, and I need to follow along and setting up a LDAP server with these contents:</div>
<div><br></div><div>--------------------------</div><div><br></div><div><div>dn: o=<a href="http://mycompany.org">mycompany.org</a></div><div>objectclass: top</div><div>objectclass: organization</div><div>o: <a href="http://mycompany.org">mycompany.org</a></div>
<div><br></div><div>dn: ou=users,o=<a href="http://mycompany.org">mycompany.org</a></div><div>objectclass:organizationalunit</div><div>ou: users</div><div>description: generic users branch</div><div><br></div><div>dn: ou=groups,o=<a href="http://mycompany.org">mycompany.org</a></div>
<div>objectclass:organizationalunit</div><div>ou: groups</div><div>description: generic groups branch</div><div><br></div><div>dn: ou=roles,o=<a href="http://mycompany.org">mycompany.org</a></div><div>objectclass:organizationalunit</div>
<div>ou: roles</div><div>description: generic roles branch</div><div><br></div><div>dn: cn=wasadmin,ou=roles,o=<a href="http://mycompany.org">mycompany.org</a></div><div>cn: wasadmin</div><div>uid: wasadmin</div><div>objectclass: top</div>
<div>objectclass: person</div><div>objectclass: organizationalPerson</div><div>objectclass: inetOrgPerson</div><div>userpassword: wasadmin</div><div>sn: wasadmin</div><div>givenname: wasadmin</div><div>title: wasadmin</div>
<div>description: WAS Administrator</div><div><br></div><div>dn: cn=ldapbind,ou=users,o=<a href="http://mycompany.org">mycompany.org</a></div><div>cn: ldapbind</div><div>uid: ldapbind</div><div>objectclass: top</div><div>
objectclass: person</div><div>objectclass: organizationalPerson</div><div>objectclass: inetOrgPerson</div><div>userpassword: ldapbind</div><div>sn: ldapbind</div><div>givenname: ldapbind</div><div>title: ldapbind</div><div>
description: ldapbind</div><div><br></div><div>dn: cn=Bob Jackson,ou=users,o=<a href="http://mycompany.org">mycompany.org</a></div><div>cn: Bob Jackson</div><div>uid: bjackson</div><div>mail: <a href="mailto:bjackson@mycompany.org">bjackson@mycompany.org</a></div>
<div>objectclass: top</div><div>objectclass: person</div><div>objectclass: organizationalPerson</div><div>objectclass: inetOrgPerson</div><div>userpassword: password</div><div>sn: Jackson</div><div>givenname: Bob</div><div>
telephonenumber: 123456789</div><div>title: WAS Administrator</div><div>description: LDAP test user</div><div><br></div><div>dn: cn=Mary Smith,ou=users,o=<a href="http://mycompany.org">mycompany.org</a></div><div>cn: Mary Smith</div>
<div>uid: msmith</div><div>mail: <a href="mailto:msmith@mycompany.org">msmith@mycompany.org</a></div><div>objectclass: top</div><div>objectclass: person</div><div>objectclass: organizationalPerson</div><div>objectclass: inetOrgPerson</div>
<div>userpassword: password</div><div>sn: Smith</div><div>givenname: Mary</div><div>telephonenumber: 123456789</div><div>title: WAS Administrator</div><div>description: LDAP test user</div><div><br></div><div>dn: cn=wasadmins,ou=groups,o=<a href="http://mycompany.org">mycompany.org</a></div>
<div>objectclass: groupofnames</div><div>cn: wasadmins</div><div>description: WAS Admins</div><div># add the group members all of which are </div><div># assumed to exist under people</div><div>member: cn=Bob Jackson,ou=users,o=<a href="http://mycompany.org">mycompany.org</a></div>
<div>member: cn=Mary Smith,ou=users,o=<a href="http://mycompany.org">mycompany.org</a></div><div>member: cn=wasadmin,ou=roles,o=<a href="http://mycompany.org">mycompany.org</a></div><div><br></div><div><br></div><div>But when I want to import, I get this:</div>
<div><br></div><div><div>[root@CentOS-01 cn=config]# ldapadd -W -D cn=admin,dc=mycompany,dc=org -v -x -f /tmp/mycompanyorg.ldif </div><div>ldap_initialize( &lt;DEFAULT&gt; )</div><div>Enter LDAP Password: </div><div>add objectclass:</div>
<div><span class="Apple-tab-span" style="white-space:pre">	</span>top</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>organization</div><div>add o:</div><div><span class="Apple-tab-span" style="white-space:pre">	</span><a href="http://mycompany.org">mycompany.org</a></div>
<div>adding new entry &quot;o=<a href="http://mycompany.org">mycompany.org</a>&quot;</div><div>ldap_add: Server is unwilling to perform (53)</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>additional info: no global superior knowledge</div>
<div><br></div></div><div><br></div><div>When I do this:</div><div><div>[root@CentOS-01 cn=config]# ldapsearch -xLLWD cn=admin,dc=mycompany,dc=org -b dc=mycompany,dc=org dn</div><div>Enter LDAP Password: </div><div>version: 1</div>
<div><br></div><div>No such object (32)</div></div><div><br></div><div>Something tells me it&#39;s wrong.</div><div><br></div><div>So, a friend who helped me said I had to create the company first, and that I should use dc=company,dc=org instead of o=<a href="http://company.org">company.org</a>.</div>
<div><br></div><div>I had to create the company first in the LDAP he said, so he passed me this file:</div><div><br></div><div><div># usergroups.ldif</div><div>#</div><div>#</div><div>dn: dc=mycompany,dc=org</div><div>dc: company</div>
<div>objectClass: top</div><div>objectClass: domain</div><div><br></div><div>dn: ou=users,dc=mycompany,dc=org</div><div>ou: Users</div><div>objectClass: top</div><div>objectClass: organizationalUnit</div><div>description: Central location for UNIX users</div>
<div><br></div><div>dn: ou=groups,dc=mycompany,dc=org</div><div>ou: Groups</div><div>objectClass: top</div><div>objectClass: organizationalUnit</div><div>description: Central location for UNIX groups</div><div><br></div><div>
# EOF</div></div><div><br></div><div><br></div><div>But I can&#39;t add that:</div><div><br></div><div><div>[root@CentOS-01 cn=config]# ldapadd -W -D cn=admin,dc=mycompany,dc=org -v -x -f /tmp/usergroup.ldif </div><div>ldap_initialize( &lt;DEFAULT&gt; )</div>
<div>Enter LDAP Password: </div><div>add dc:</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>company</div><div>add objectClass:</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>top</div>
<div><span class="Apple-tab-span" style="white-space:pre">	</span>domain</div><div>adding new entry &quot;dc=mycompany,dc=org&quot;</div><div>ldap_add: Naming violation (64)</div><div><span class="Apple-tab-span" style="white-space:pre">	</span>additional info: value of single-valued naming attribute &#39;dc&#39; conflicts with value present in entry</div>
<div><br></div></div><div><br></div><div><br></div><div>I hope I will ever solve this, I can&#39;t complete my study now and have wasted hours and hours on this ldap problem.</div><div><br></div><div>I hope you can help me out..</div>
<div><br></div><div>Karntol</div><div><br></div><div><br></div><div><br></div></div>