All,

Attempting to backtrack a bit by deleting an overlay using the following (have tried both with & without the escape character with the same error “Invalid DN”:

# ldapdelete -W -x -ZZ -D cn=admin,cn=config -v -d 9 "olcOverlay=\{0\}syncprov,olcDatabase=\{0\}config,cn=config"

And receiving the following error:

…

read1msg: ld 0xb749c40 0 new referrals

read1msg:  mark request completed, ld 0xb749c40 msgid 3

request done: ld 0xb749c40 msgid 3

res_errno: 34, res_error: <invalid DN>, res_matched: <>

ldap_free_request (origid 3, msgid 3)

ldap_parse_result

ber_scanf fmt ({iAA) ber:

ber_scanf fmt (}) ber:

ldap_msgfree

ldap_err2string

ldap_delete: Invalid DN syntax (34)

        additional info: invalid DN

ldap_free_connection 1 1

ldap_send_unbind

ber_flush2: 7 bytes to sd 3

TLS trace: SSL3 alert write:warning:close notify

ldap_free_connection: actually freed

Here is a slapcat of that “olcDatabase”. 

# slapcat -s olcDatabase=\{0\}config,cn=config

dn: olcDatabase={0}config,cn=config

objectClass: olcDatabaseConfig

olcDatabase: {0}config

olcAccess: {0}to *  by * none

olcAddContentAcl: TRUE

olcLastMod: TRUE

olcMaxDerefDepth: 15

olcReadOnly: FALSE

olcRootDN: cn=admin,cn=config

olcRootPW:: _________________________________=

olcSyncUseSubentry: FALSE

olcMonitoring: FALSE

structuralObjectClass: olcDatabaseConfig

entryUUID: 4354a8b6-8a36-4804-81f8-14a8550aef74

creatorsName: cn=config

createTimestamp: 20131218155313Z

entryCSN: 20131218155313.477459Z#000000#000#000000

modifiersName: cn=config

modifyTimestamp: 20131218155313Z

dn: olcOverlay={0}syncprov,olcDatabase={0}config,cn=config

objectClass: olcOverlayConfig

objectClass: olcConfig

objectClass: top

objectClass: olcSyncProvConfig

olcOverlay: {0}syncprov

structuralObjectClass: olcSyncProvConfig

entryUUID: 644d3984-d125-446e-aae2-1ddc541f4661

creatorsName: cn=admin,cn=config

createTimestamp: 20140121191314Z

entryCSN: 20140121191314.076259Z#000000#004#000000

modifiersName: cn=admin,cn=config

modifyTimestamp: 20140121191314Z

Thanks in advance

John D. Borresen (Dave)

Linux/Unix Systems Administrator

MIT  Lincoln Laboratory

Surveillance Systems Group

244 Wood St

Lexington, MA  02420

Email: john.borresen@ll.mit.edu