[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Why "ldapadd -x -D cn=admin, cn=config -W -f ~/sudoWork/cn\=sudo.ldif" does not work?

To: Dan White <dwhite@olp.net>
Subject: Re: Why "ldapadd -x -D cn=admin, cn=config -W -f ~/sudoWork/cn\=sudo.ldif" does not work?
From: Peng Yu <pengyu.ut@gmail.com>
Date: Sat, 29 Mar 2014 11:52:55 -0500
Cc: openldap-technical@openldap.org
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=WTPGrkUgGDjcmxOuNGxFwKka/p8TzNVjktggVtTH9SU=; b=muELMxMfjHzPm7ki8do/0a2Ywb4BfmgSwJO0INkM65NwPbFQWRl3LNcK4ns+DNHy+C YDWf8J8r0xxTFsHRQGiAXcrN6qSz5nsfGBQY4lueSUPdz0YBpruX83fgfssmA61m1/lY kHw1mNG/u03k2PrWqaGL0uLfQJ5D1oidSn/A7ZF3cE7LcVe8DfaRh/fPoonxHiw2NzTC rwCRE0tv9Xrs4uNocT/TrMh1cmOm1KgHR6uxHcIV6tjy2JjcuLaFRpkmyW26ivxTiZYT lyAMSUpfSJzbYlEcKph0nkgbxb0RJZdGnYpay12Mzx2mKmdESBqVyT1zwLQDEysZ+6HM dYPA==
In-reply-to: <20140329161851.GA5904@dan.olp.net>
References: <CABrM6wnax2Z+6URcHhE-dpetaZTqyvGZ9T0_Tm=anbJHfELZsQ@mail.gmail.com> <20140329133250.GA6039@dan.olp.net> <CABrM6wnn-JAKarE896cLkb-bnp9p8d+T3RrmHSkV0TAZqHmLiA@mail.gmail.com> <20140329161851.GA5904@dan.olp.net>

> You have no olcRootDN listed for your configuration database, which, as I
> understand it, means you have no capability to modify your config using
> ldapadd. For a solution, see:
>
> http://www.openldap.org/lists/openldap-technical/201211/msg00195.html

The above instructions seem to be dangerous as it involves direct
editing of /etc/ldap/slapd.d. Is it the best way.

Also, what is "<edit the ldif>". Does something like the following work?

https://help.ubuntu.com/13.10/serverguide/openldap-server.html

# Accesslog database definitions
dn: olcDatabase={2}hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {2}hdb
olcDbDirectory: /var/lib/ldap/accesslog
olcSuffix: cn=accesslog
olcRootDN: cn=admin,dc=example,dc=com
olcDbIndex: default eq
olcDbIndex: entryCSN,objectClass,reqEnd,reqResult,reqStart

-- 
Regards,
Peng

Follow-Ups:
- Re: Why "ldapadd -x -D cn=admin, cn=config -W -f ~/sudoWork/cn\=sudo.ldif" does not work?
  - From: Robert Heller <heller@deepsoft.com>

References:
- Why "ldapadd -x -D cn=admin, cn=config -W -f ~/sudoWork/cn\=sudo.ldif" does not work?
  - From: Peng Yu <pengyu.ut@gmail.com>
- Re: Why "ldapadd -x -D cn=admin, cn=config -W -f ~/sudoWork/cn\=sudo.ldif" does not work?
  - From: Dan White <dwhite@olp.net>
- Re: Why "ldapadd -x -D cn=admin, cn=config -W -f ~/sudoWork/cn\=sudo.ldif" does not work?
  - From: Peng Yu <pengyu.ut@gmail.com>
- Re: Why "ldapadd -x -D cn=admin, cn=config -W -f ~/sudoWork/cn\=sudo.ldif" does not work?
  - From: Dan White <dwhite@olp.net>

Prev by Date: Re: What is the replacement for /etc/ldap.conf?
Next by Date: Re: What is the replacement for /etc/ldap.conf?
Index(es):
- Chronological
- Thread