Fedora directory users - Mar 2009 - Problem in moving subtree of entries to new parent.

Hello all,

Currently I am facing problem with moving subtree of entries to a new
parent.

I am trying to move a subtree or a user to a new parent. I am getting the
following error message.

There are two OU’s under the suffix o=xyzcorp.com ou=education and
ou=finance.
Browny is the user in ou=education,o=xyzcorp.com. Now I need to move Browny
to ou=finance,o=xyzcorp.com.

When I attempt to do the following modification I am getting error.

dn: cn=Browny,ou=education,o=xyzcorp.com
changetype: modrdn
newrdn: cn=BrownyNew
deleteoldrdn: 0
newsuperior: ou=finance,o= xyzcorp.com

*new RDN: cn=BrownyNew, new parent ou=finance,o= xyzcorp.com (keep existing
values)
modifying RDN of entry cn=Browny,ou= education,o= xyzcorp.com and/or moving
it beneath a new parent

ldap_rename: DSA is unwilling to perform
ldap_rename: additional info: server does not support moving of entries*


*I tried it this way also,…….

*dn: cn=Browny,ou=education,o=xyzcorp.com
changetype: modrdn
newrdn: cn=Browny
deleteoldrdn: 1
newparent: ou=finance,o= xyzcorp.com

*……no success*

Like the same way I am not able to move the OU also to a new parent.

Is anybody aware of this.

If so educate me how to do this.

Thanks in advance,
Brown Deigo.

This is the restriction the current FDS has.  Please see "2.4.2.1. A 
Note on Renaming Entries" on this Administration Guide page.

http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Creating_Directory_Entries-LDIF_Update_Statements.html#LDIF_Update_Statements-Renaming_an_Entry_Using_LDIF

Thanks,
--noriko

brown deigo wrote:
> Hello all,
>
> Currently I am facing problem with moving subtree of entries to a new 
> parent.
>
> I am trying to move a subtree or a user to a new parent. I am getting 
> the following error message.
>
> There are two OU’s under the suffix o=xyzcorp.com
<http://xyzcorp.com>
> ou=education and ou=finance.
> Browny is the user in ou=education,o=xyzcorp.com
<http://xyzcorp.com>.
> Now I need to move Browny to ou=finance,o=xyzcorp.com 
> <http://xyzcorp.com>.
>
> When I attempt to do the following modification I am getting error.
>
> dn: cn=Browny,ou=education,o=xyzcorp.com <http://xyzcorp.com>
> changetype: modrdn
> newrdn: cn=BrownyNew
> deleteoldrdn: 0
> newsuperior: ou=finance,o= xyzcorp.com <http://xyzcorp.com>
>
> *new RDN: cn=BrownyNew, new parent ou=finance,o= xyzcorp.com 
> <http://xyzcorp.com> (keep existing values)
> modifying RDN of entry cn=Browny,ou= education,o= xyzcorp.com 
> <http://xyzcorp.com> and/or moving it beneath a new parent
>
> ldap_rename: DSA is unwilling to perform
> ldap_rename: additional info: server does not support moving of entries*
>
>
> *I tried it this way also,…….
>
> *dn: cn=Browny,ou=education,o=xyzcorp.com <http://xyzcorp.com>
> changetype: modrdn
> newrdn: cn=Browny
> deleteoldrdn: 1
> newparent: ou=finance,o= xyzcorp.com <http://xyzcorp.com>
>
> *……no success*
>
> Like the same way I am not able to move the OU also to a new parent.
>
> Is anybody aware of this.
>
> If so educate me how to do this.
>
>
> Thanks in advance,
> Brown Deigo.
>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

Yes, I had gone through the topic. Thanks for the pointer.*
*
It says really there is no way to move subtrees to different parent. Instead
I need to create same entry with same attributes under the parent suffix to
which I need to actually move it and finally delete the old ones?

Is my understanding right? If so it is just like creating a new entry under
a parent. It doesn''t means move an existing entry to another suffix.

If I am wrong throw some light on this.

Thanks,
Brown Diego



2009/3/21 Noriko Hosoi <nhosoi@redhat.com>
> This is the restriction the current FDS has.  Please see "2.4.2.1. A
Note
> on Renaming Entries" on this Administration Guide page.
>
>
>
http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Creating_Directory_Entries-LDIF_Update_Statements.html#LDIF_Update_Statements-Renaming_an_Entry_Using_LDIF
>
> Thanks,
> --noriko
>
> brown deigo wrote:
>
>> Hello all,
>>
>> Currently I am facing problem with moving subtree of entries to a new
>> parent.
>>
>> I am trying to move a subtree or a user to a new parent. I am getting
the
>> following error message.
>>
>> There are two OU’s under the suffix o=xyzcorp.com
<http://xyzcorp.com>
>> ou=education and ou=finance.
>> Browny is the user in ou=education,o=xyzcorp.com
<http://xyzcorp.com>.
>> Now I need to move Browny to ou=finance,o=xyzcorp.com
<http://xyzcorp.com
>> >.
>>
>> When I attempt to do the following modification I am getting error.
>>
>> dn: cn=Browny,ou=education,o=xyzcorp.com <http://xyzcorp.com>
>> changetype: modrdn
>> newrdn: cn=BrownyNew
>> deleteoldrdn: 0
>> newsuperior: ou=finance,o= xyzcorp.com <http://xyzcorp.com>
>>
>> *new RDN: cn=BrownyNew, new parent ou=finance,o= xyzcorp.com <
>> http://xyzcorp.com> (keep existing values)
>> modifying RDN of entry cn=Browny,ou= education,o= xyzcorp.com <
>> http://xyzcorp.com> and/or moving it beneath a new parent
>>
>> ldap_rename: DSA is unwilling to perform
>> ldap_rename: additional info: server does not support moving of
entries*
>>
>>
>> *I tried it this way also,…….
>>
>> *dn: cn=Browny,ou=education,o=xyzcorp.com <http://xyzcorp.com>
>> changetype: modrdn
>> newrdn: cn=Browny
>> deleteoldrdn: 1
>> newparent: ou=finance,o= xyzcorp.com <http://xyzcorp.com>
>>
>> *……no success*
>>
>> Like the same way I am not able to move the OU also to a new parent.
>>
>> Is anybody aware of this.
>>
>> If so educate me how to do this.
>>
>>
>> Thanks in advance,
>> Brown Deigo.
>>
>>
>>
------------------------------------------------------------------------
>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users@redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>

Brown Diego wrote:
> 2009/3/21 Noriko Hosoi <nhosoi@redhat.com
<mailto:nhosoi@redhat.com>>
> 
>     This is the restriction the current FDS has.  Please see "2.4.2.1.
A
>     Note on Renaming Entries" on this Administration Guide page.
> 
>    
http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Creating_Directory_Entries-LDIF_Update_Statements.html#LDIF_Update_Statements-Renaming_an_Entry_Using_LDIF
> It says really there is no way to move subtrees to different parent.
> Instead I need to create same entry with same attributes under the
> parent suffix to which I need to actually move it and finally delete the
> old ones?
Yes. Unfortunately setting the newSuperior in ModifyDNRequest is not
supported in FDS even when moving entries without subordinate entries.

Having to add/delete an entry to move it is not atomic. So the LDAP
client application has to implement some sort of rollback in case
something is going wrong.

I thought of supporting something like this in web2ldap. But I wonder
which order of the operations is right and how to deal with errors. E.g.
if there''s a unique constraint on some of the attributes an
add-delete-sequence will simply fail. And if implementing it as
delete-add-sequence and there''s something going wrong when adding the
entry (e.g. newrdn is already present under the newSuperior) the entry
is lost (and has to be re-added at the old superior). Gee, that''s bad
and probably not worth the implementation effort.

FDS developers should seriously consider to at least implement handling
the newSuperior in ModifyDNRequest for moving entries without
subordinate entries.

Ciao, Michael.

I have made a request of this feature some time ago, you can follow its
progress and add your comments or requests here :
https://bugzilla.redhat.com/show_bug.cgi?id=429005



2009/3/21 Michael Ströder <michael@stroeder.com>
> Brown Diego wrote:
> > 2009/3/21 Noriko Hosoi <nhosoi@redhat.com
<mailto:nhosoi@redhat.com>>
> >
> >     This is the restriction the current FDS has.  Please see
"2.4.2.1. A
> >     Note on Renaming Entries" on this Administration Guide page.
> >
> >
>
http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Creating_Directory_Entries-LDIF_Update_Statements.html#LDIF_Update_Statements-Renaming_an_Entry_Using_LDIF
> > It says really there is no way to move subtrees to different parent.
> > Instead I need to create same entry with same attributes under the
> > parent suffix to which I need to actually move it and finally delete
the
> > old ones?
>
> Yes. Unfortunately setting the newSuperior in ModifyDNRequest is not
> supported in FDS even when moving entries without subordinate entries.
>
> Having to add/delete an entry to move it is not atomic. So the LDAP
> client application has to implement some sort of rollback in case
> something is going wrong.
>
> I thought of supporting something like this in web2ldap. But I wonder
> which order of the operations is right and how to deal with errors. E.g.
> if there''s a unique constraint on some of the attributes an
> add-delete-sequence will simply fail. And if implementing it as
> delete-add-sequence and there''s something going wrong when adding
the
> entry (e.g. newrdn is already present under the newSuperior) the entry
> is lost (and has to be re-added at the old superior). Gee, that''s
bad
> and probably not worth the implementation effort.
>
> FDS developers should seriously consider to at least implement handling
> the newSuperior in ModifyDNRequest for moving entries without
> subordinate entries.
>
> Ciao, Michael.
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>