samba - Jul 2020 - Naming violation: objectClass: myObjectClass not a valid child class for <>

Sun, 26 Jul 2020 12:06:03 +0100 Rowland penny via samba <samba at
lists.samba.org>:
> On 26/07/2020 10:58, RhineDevil wrote:
> > You said you didn't want to help me about this but if you'd do
at least I'd learn something useful for custom schemas, since this type of
error isn't referenced anywhere
> 
> No, I said I wouldn't help you shoot yourself in the foot, this
isn't
> shooting anything ;-)
> 
> Create two ldif files:
> 
> /tmp/class.ldif
> 
> dn: CN=nisMailAlias,CN=Schema,CN=Configuration,dc=local
> objectClass: top
> objectClass: classSchema
> governsID: 1.3.6.1.4.1.42.2.27.1.2.5
> schemaIdGuid:: gMnYtZqCPTLAMXe3RZus8A=> cn: nisMailAlias
> name: nisMailAlias
> lDAPDisplayName: nisMailAlias
> # possSuperiors: top
> subClassOf: top
> mustContain: cn
> mayContain: rfc822MailMember
> showInAdvancedViewOnly: FALSE
> adminDisplayName: nisMailAlias
> adminDescription: NIS mail alias
> objectClassCategory: 1
> systemOnly: FALSE
> defaultObjectCategory: CN=nisMailAlias,CN=Schema,CN=Configuration,dc=local
> 
> /tmp/attr.ldif
> 
> dn: CN=rfc822MailMember,CN=Schema,CN=Configuration,dc=local
> objectClass: top
> objectClass: attributeSchema
> attributeID: 1.3.6.1.4.1.42.2.27.2.1.15
> schemaIdGuid:: aB7do9Dx3LkCSVgvixllpg=> cn: rfc822MailMember
> name: rfc822MailMember
> lDAPDisplayName: rfc822MailMember
> adminDisplayName: rfc822MailMember
> adminDescription: rfc822 mail address of group member(s)
> attributeSyntax: 2.5.5.5
> isSingleValued: FALSE
> oMSyntax: 22
> 
> Now add the schema update like this:
> 
> service samba-ad-dc stop
> 
> ldbmodify -H /var/lib/samba/private/sam.ldb /tmp/attr.ldif 
> --option="dsdb:schema update allowed"=true
> 
> ldbmodify -H /var/lib/samba/private/sam.ldb /tmp/class.ldif 
> --option="dsdb:schema update allowed"=true
> 
> service samba-ad-dc start
> 
> Finally, Create another ldif:
> 
> /tmp/mod.ldif
> 
> dn: ou=myOrganizationUnit,dc=local
> ou: myOrganizationUnit
> objectClass: top
> objectClass: organizationalUnit
> 
> dn: cn=abuse,ou=myOrganizationUnit,dc=local
> cn: abuse
> objectClass: nisMailAlias
> objectClass: top
> rfc822MailMember: root
> 
> and add it with:
> 
> ldbadd -H /var/lib/samba/private/sam.ldb /tmp/mod.ldif
> 
> Rowland
> 
Done, I still get the same errors when adding mod.ldif

(I used ldbadd instead of ldbmodify, is that a problem?)

-- attr.ldif: --
dn: CN=rfc822MailMember,CN=Schema,CN=Configuration,DC=mydomain,DC=ldom
cn: rfc822MailMember
objectClass: top
objectClass: attributeSchema
attributeID: 1.3.6.1.4.1.42.2.27.2.1.15
schemaIdGuid:: aB7do9Dx3LkCSVgvixllpg=name: rfc822MailMember
lDAPDisplayName: rfc822MailMember
adminDisplayName: rfc822MailMember
adminDescription: rfc822 mail address of group member(s)
attributeSyntax: 2.5.5.5
oMSyntax: 22
isSingleValued: FALSE

-- class.ldif: --
dn: CN=nisMailAlias,CN=Schema,CN=Configuration,DC=mydomain,DC=ldom
cn: nisMailAlias
objectClass: top
objectClass: classSchema
governsID: 1.3.6.1.4.1.42.2.27.1.2.5
schemaIdGuid:: gMnYtZqCPTLAMXe3RZus8A=name: nisMailAlias
lDAPDisplayName: nisMailAlias
adminDisplayName: nisMailAlias
adminDescription: NIS mail alias
subClassOf: top
objectClassCategory: 1
mustContain: cn
mayContain: rfc822MailMember
showInAdvancedViewOnly: FALSE
systemOnly: FALSE
defaultObjectCategory:
CN=nisMailAlias,CN=Schema,CN=Configuration,DC=mydomain,DC=ldom

-- mod.ldif: --
dn: OU=MyOrganizationUnit,DC=mydomain,DC=ldom
ou: MyOrganizationUnit
objectClass: top
objectClass: organizationalUnit

dn: cn=abuse,ou=MyOrganizationUnit,DC=mydomain,DC=ldom
cn: abuse
objectClass: nisMailAlias
objectClass: top
rfc822MailMember: root
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: Firma digitale OpenPGP
URL:
<http://lists.samba.org/pipermail/samba/attachments/20200726/384b0fe9/attachment.sig>

On 26/07/2020 18:45, RhineDevil wrote:
>
> Done, I still get the same errors when adding mod.ldif
>
> (I used ldbadd instead of ldbmodify, is that a problem?)
No, that isn't the problem, the problem is that I forgot to remove a 
comment :-(

Create another ldif:

/tmp/classmod.ldif

dn: CN=nisMailAlias,CN=Schema,CN=Configuration,DC=mydomain,DC=ldom
changetype: modify
add: possSuperiors
possSuperiors: top

Then stop Samba again and modify the class with:

service samba-ad-dc stop

ldbmodify -H /var/lib/samba/private/sam.ldb /tmp/classmod.ldif 
--option="dsdb:schema update allowed"=true

service samba-ad-dc start

Then try to add your OU ldif again.

Rowland

Sun, 26 Jul 2020 19:03:04 +0100 Rowland penny via samba <samba at
lists.samba.org>:
> On 26/07/2020 18:45, RhineDevil wrote:
> >
> > Done, I still get the same errors when adding mod.ldif
> >
> > (I used ldbadd instead of ldbmodify, is that a problem?)
> 
> No, that isn't the problem, the problem is that I forgot to remove a 
> comment :-(
> 
> Create another ldif:
> 
> /tmp/classmod.ldif
> 
> dn: CN=nisMailAlias,CN=Schema,CN=Configuration,DC=mydomain,DC=ldom
> changetype: modify
> add: possSuperiors
> possSuperiors: top
> 
> Then stop Samba again and modify the class with:
> 
> service samba-ad-dc stop
> 
> ldbmodify -H /var/lib/samba/private/sam.ldb /tmp/classmod.ldif 
> --option="dsdb:schema update allowed"=true
> 
> service samba-ad-dc start
> 
> Then try to add your OU ldif again.
> 
> Rowland
> 
Got nice results, later I moved to other migrations and that's the only
error I don't know how to solve:
Error: Unable to parse dn
'CN=echo+ipServiceProtocol=ddp,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=ldom'

dn:
CN=echo+ipServiceProtocol=ddp,CN=services,CN=ypServ30,CN=RpcServices,CN=System,DC=mydomain,DC=ldom
cn: echo
objectClass: ipService
objectClass: top
ipServicePort: 4
ipServiceProtocol: ddp

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: Firma digitale OpenPGP
URL:
<http://lists.samba.org/pipermail/samba/attachments/20200727/00e7ad73/attachment.sig>