Hello,
nisnetgrouptriple = "(" hostname "," username "," domainname ")"
You have
nisNetgroupTriple: (,luke_l,mydomain.com http://mydomain.com/ ) which I would translate to: <empty>,username, domainname.
Perhaps you just have to add the hostname and not leave it blank?
Cheers, Claus
________________________________
Von: openldap-technical-bounces+claus.kick=siemens.com@OpenLDAP.org [mailto:openldap-technical-bounces+claus.kick=siemens.com@OpenLDAP.org] Im Auftrag von Luke Lee Gesendet: Dienstag, 22. April 2008 01:21 An: Dieter Kluenter; openldap-technical@openldap.org Betreff: Re: Invalid syntax (21)
Hi Dieter,
I tried several modifications but still couldn't get it working. Can you or anyone else help please? What's wrong with my syntax? Thanks.
Luke
----- Original Message ---- From: Dieter Kluenter dieter@dkluenter.de To: openldap-technical@openldap.org Sent: Saturday, April 19, 2008 4:27:20 AM Subject: Re: Invalid syntax (21)
Luke Lee leeluke77@yahoo.com writes:
Hi,
I encounter a situation where I couldn't find any syntax errors in my ldif file but failed to use ldapadd to add entries. I didn't find any trailing spaces at the end of each objectClass. The following is the error message:
adding new entry "cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com" ldapadd: Invalid syntax (21) additional info: nisNetgroupTriple: value #0 invalid per syntax
My ldif file is like the following:
[...]
dn: cn=LocalSales,ou=Netgroup,dc=mydomain,dc=com objectClass: nisNetgroup objectClass: top cn: LocalSales nisNetgroupTriple: (,luke_l,mydomain.com http://mydomain.com/ ) nisNetgroupTriple: (,sam_c,mydomain.com http://mydomain.com/ ) nisNetgroupTriple: (,amy_s,mydomain.com http://mydomain.com/ ) nisNetgroupTriple: (,anita_c,mydomain.com http://mydomain.com/ ) nisNetgroupTriple: (,jim_f,mydomain.com http://mydomain.com/ ) description: Local Sales
The nisnetgrouptriple syntax is described in RFC-2307 as follows:
Values in this syntax are represented by the following: nisnetgrouptriple = "(" hostname "," username "," domainname ")" hostname = "" / "-" / keystring username = "" / "-" / keystring domainname = "" / "-" / keystring
See RFC-2307 for examples.
-Dieter