Trying to load 389 server with users.

Issues related to configuring your network
Post Reply
iwishitwouldwork
Posts: 62
Joined: 2014/02/08 14:56:39

Trying to load 389 server with users.

Post by iwishitwouldwork » 2020/06/15 21:59:55

Centos 8
Fully up to date on patches.


I'm trying to load users into the 389 server.
Here's how I made it (trimming the fs.inf file for
the sake of bandwidth):

Code: Select all

[root@fs ~]# dscreate create-template LDAP/fs.inf

[root@fs ~]# grep -v ^# LDAP/fs.inf  | grep -v ^";" | uniq

[general]
config_version = 2

full_machine_name = fs.jgscrater.com

selinux = True

start = True

strict_host_checking = False

[slapd]

instance_name = fs

root_dn = cn=DirecMan

root_password = __deleted__

[backend-userroot]

Code: Select all

[root@fs ~]# dscreate from-file LDAP/fs.inf 
[root@fs ~]# dsctl --list
slapd-fs

So it's running. Here is my .dsrc file:

Code: Select all

[fs]
# Note that '/' is replaced to '%%2f'.
uri = ldapi://%%2fvar%%2frun%%2fslapd-fs.socket
###uri = ldap://fs.jgscrater.com:389
basedn = dc=jgscrater,dc=com
binddn = cn=DirecMan
Here's the command I'm trying and the output:

Code: Select all

[root@fs ~]# dsidm -b dc=jgscrater,dc=com -D cn=DirecMan ldap://fs.jgscrater.com
:389 user cre
ate	\
--uid jgs	\
--cn jgs	\
--displayName jgs	\
--uidNumber 1000	\
--gidNumber 1000	\
--homeDirectory /home/jgs
Enter password for cn=DirecMan on ldap://fs.jgscrater.com:389: 
Error: No such object

How is it possible that I have the object wrong? Does root's password
have to match the Directory Manager's password (it doesn't)?
Doesn't seem like that should be a requirement. Anyway, the password
that I give at the prompt doesn't complain about a bad password.
And if I deliberately give it the wrong password it does complain
about credentials.

iwishitwouldwork
Posts: 62
Joined: 2014/02/08 14:56:39

Re: Trying to load 389 server with users. -- WORKAROUND

Post by iwishitwouldwork » 2020/06/21 16:39:31

Okay, I don't know all of the reasons/answers, but I have a workaround.

My original ".inf" file had a blank

Code: Select all

#	THIS FAILS
[backend-userroot]
section. If I use this

Code: Select all

#	this WORKS
[backend-userroot]

sample_entries = yes
suffix = dc=jgscrater,dc=com
Now, it does take BOTH of those lines. It seems to me that
whatever is being created for me, that there ought to be a way
to do it manually. Whatever, I guess.....

Post Reply

Return to “CentOS 8 - Networking Support”