You didn't try all combinations of parameters, you need to be exhaustive when doing trial and error, otherwise there is no guarantee you get to the right combination in a finite amount of time. Or, you can read RFC4511 and find out how to do things right the first time.

p.

Hi thanks for the helo I have being tryinn a few things with ldapmodify,

I need to modify the user from dn: uid=user1,ou=People,dc=mydomain,dc=com, to dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com,

I have try some of the following attempts

dn: uid=user1,ou=People,dc=mydomain,dc=com changetype: modify replace: dn dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com

that according to what i have read it doesnt have work, because dn is not exactly like an attribute

dn: uid=user1,ou=People,dc=mydomain,dc=com changeType: modrdn newRDN: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com deleteOldRDN: 1

and this ones gives me

modifying rdn of entry "uid=user1,ou=People,dc=mydomain,dc=com" rename completed ldapmodify: Invalid DN syntax (34) additional info: invalid new RDN

I dont know how to add an ou to the dn.

Thanks

----- Original Message ----- From: "Andrey A. Konovalov" mudraia@list.ru To: openldap-technical@openldap.org Sent: Friday, September 9, 2011 12:43:01 PM GMT -05:00 Colombia Subject: Re: Change a user dn

...

Hi

I have Openldap with samba, and some users. My users are part of ou=People,dc=mydomain,dc=com, like this, dn: uid=user1,ou=People,dc=mydomain,dc=com,

So i wanted some of my users to be able to administer a group of users and be able to create users, so a friend of mine recommended me to do the following, create a group like this

dn: cn=Admin Group1,cn=Admins,ou=People,dc=mydomain,dc=com, objectClass: groupOfNames objectClass: top cn: Admin Group1 member: uid=adming1,ou=People,dc=mydomain,dc=com,

and

dn: ou=Group1,ou=People,dc=mydomain,dc=com objectClass: organizationalUnit objectClass: top ou: U.A.A. Group1

the users of this "group" whould have to be

dn: uid=user1,ou=Group1,ou=People,dc=mydomain,dc=com,

And with and acl I give Admin Group1 users complete control over that ou.

So this seems to work. But I already have users that use my ldap, is it possible to change their dn, I am not clear on how to do this.

Thanks,

Juan Diego

Maybe, (do it with ldapmodify, fex.) dn: uid=user1,dc=tratata,dc=com changeType: modrdn newRDN: user2 deleteOldRDN: 1

???

Andrey A. Konovalov mudraia@list.ru