On 05/01/13 21:30 +0530, pradyumna dash wrote:

Hi,

Am facing an issue while configuring OpenLDAP. My suffix looks like below in the *slapd.conf* file and apart from the default schema i have used ppolicy.

database bdb suffix "dc=example,dc=com,dc=in" rootdn "cn=Manager,dc=example,dc=com,dc=in"

*test.ldif*

dn: dc=com,dc=in dc: com objectClass: top objectClass: domain

Am using the below command to add this LDIF file:

*ldapadd -x -W -D "cn=Manager,dc=example,dc=com,dc=in" -f /opt/test.ldif*

But am getting the below error.

"adding new entry "dc=com,dc=in" ldap_add: Server is unwilling to perform (53) additional info: no global superior knowledge**"*

The suffix you have defined in slapd.conf is 'dc=example,dc=com,dc=in', but the 'dc=com,dc=in' entry falls outside of that suffix, so slapd has no knowledge of where to store it.

Consider removing that entry from your input file.

Am Wed, 1 May 2013 21:30:31 +0530 schrieb pradyumna dash neomatrixgem@gmail.com:

Hi,

Am facing an issue while configuring OpenLDAP. My suffix looks like below in the *slapd.conf* file and apart from the default schema i have used ppolicy.

database bdb suffix "dc=example,dc=com,dc=in" rootdn "cn=Manager,dc=example,dc=com,dc=in"

Here you declare the root entry dn as dc=example,dc=com,dc=in

# SAG: 20100203 overlay ppolicy ppolicy_default "cn=default,ou=policies,o=test,dc=example,dc=com,dc=in" ppolicy_use_lockout

I have prepared the below LDIF to add

*test.ldif*

dn: dc=com,dc=in dc: com objectClass: top objectClass: domain

dc=com,dc=in is superior to dc=example,dc=com,dc=in but the server has no knowledge of this dn.

[...]

-Dieter