Steven Bonneville
2005-Dec-06 23:44 UTC
[Fedora-directory-users] Re: a little bit of samba confusion
Craig White <craigwhite@azapple.com> wrote:> First, imported nearly my entire openldap structure...but couldn''t > import this record > > dn: sambaDomainName=AZAPPLE,dc=azapple,dc=com > objectClass: sambaDomain > sambaDomainName: AZAPPLE > sambaSID: S-1-5-21-1423820788-2381578139-3444021595 > sambaAlgorithmicRidBase: 1000 > > Easy enough to recreate in console but didn''t understand the error... > [03/Dec/2005:11:24:28 -0700] - Entry > "sambaDomainName=AZAPPLE,dc=azapple,dc=com" -- attribute "objectClass" > not allowedThe samba.schema file was converted with a tool that doesn''t avoid the "overly picky schema parsing" bug (#170791). You can try the new schema conversion script on the website to see if it handles this, or for samba.schema the workaround ./ol-schema-migrate.pl samba.schema | grep -v DESC > 61samba.ldif to remove all DESC lines from the schema will work, since the DESC line is an optional line that is out of order in the original file. See the bug for details about how this affects objectclass sambaDomain; the short story is that Directory Server doesn''t know that sambaDomain is derived from objectclass top, from which sambaDomain inherits the "objectClass" attribute. -- Steve Bonneville
Mike Jackson
2005-Dec-07 05:20 UTC
Re: [Fedora-directory-users] Re: a little bit of samba confusion
Steven Bonneville wrote:> Craig White <craigwhite@azapple.com> wrote: > >>First, imported nearly my entire openldap structure...but couldn''t >>import this record >> >>dn: sambaDomainName=AZAPPLE,dc=azapple,dc=com >>objectClass: sambaDomain >>sambaDomainName: AZAPPLE >>sambaSID: S-1-5-21-1423820788-2381578139-3444021595 >>sambaAlgorithmicRidBase: 1000 >> >>Easy enough to recreate in console but didn''t understand the error... >>[03/Dec/2005:11:24:28 -0700] - Entry >>"sambaDomainName=AZAPPLE,dc=azapple,dc=com" -- attribute "objectClass" >>not allowed > > > The samba.schema file was converted with a tool that doesn''t avoid > the "overly picky schema parsing" bug (#170791). You can try the > new schema conversion script on the website to see if it handles > this, or for samba.schema the workaround > > ./ol-schema-migrate.pl samba.schema | grep -v DESC > 61samba.ldif >Hi, The `grep -v DESC'' is not necessary now. I have fixed that script just two days ago to work with the overly picky schema parser :-) Note that I changed the url on the wiki to point to my web server, since I am not allowed to upload files to the fedora webserver itself. -- mike