Trying to load 389 server with users.

[iwishitwouldwork]

Centos 8
Fully up to date on patches.


I'm trying to load users into the 389 server.
Here's how I made it (trimming the fs.inf file for
the sake of bandwidth):

Code: Select all

[root@fs ~]# dscreate create-template LDAP/fs.inf

[root@fs ~]# grep -v ^# LDAP/fs.inf  | grep -v ^";" | uniq

[general]
config_version = 2

full_machine_name = fs.jgscrater.com

selinux = True

start = True

strict_host_checking = False

[slapd]

instance_name = fs

root_dn = cn=DirecMan

root_password = __deleted__

[backend-userroot]

Code: Select all

[root@fs ~]# dscreate from-file LDAP/fs.inf 
[root@fs ~]# dsctl --list
slapd-fs

So it's running. Here is my .dsrc file:

Code: Select all

[fs]
# Note that '/' is replaced to '%%2f'.
uri = ldapi://%%2fvar%%2frun%%2fslapd-fs.socket
###uri = ldap://fs.jgscrater.com:389
basedn = dc=jgscrater,dc=com
binddn = cn=DirecMan

Here's the command I'm trying and the output:

Code: Select all

[root@fs ~]# dsidm -b dc=jgscrater,dc=com -D cn=DirecMan ldap://fs.jgscrater.com
:389 user cre
ate	\
--uid jgs	\
--cn jgs	\
--displayName jgs	\
--uidNumber 1000	\
--gidNumber 1000	\
--homeDirectory /home/jgs
Enter password for cn=DirecMan on ldap://fs.jgscrater.com:389: 
Error: No such object

How is it possible that I have the object wrong? Does root's password
have to match the Directory Manager's password (it doesn't)?
Doesn't seem like that should be a requirement. Anyway, the password
that I give at the prompt doesn't complain about a bad password.
And if I deliberately give it the wrong password it does complain
about credentials.

[iwishitwouldwork]

Okay, I don't know all of the reasons/answers, but I have a workaround.

My original ".inf" file had a blank

Code: Select all

#	THIS FAILS
[backend-userroot]

section. If I use this

Code: Select all

#	this WORKS
[backend-userroot]

sample_entries = yes
suffix = dc=jgscrater,dc=com

Now, it does take BOTH of those lines. It seems to me that
whatever is being created for me, that there ought to be a way
to do it manually. Whatever, I guess.....