William,
I started over from scratch and began to follow exactly the path I had charted out with
the inclusion of where the blanks and empty lines were to be in the various command lines.
It Worked!!!
Thanks for your help and insights. That was what enabled me to get to this point.
Bob
-----Original Message-----
From: William Brown [mailto:wbrown@suse.de]
Sent: Monday, September 23, 2019 20:58
To: 389-users(a)lists.fedoraproject.org
Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
Okay, so you need to create the domain objects then. I'm not sure your ldapadd file is
correct though, I think you need a blank line between the two entries?
On 24 Sep 2019, at 12:55, rtbell(a)GRANITEMOUNTAIN.COM wrote:
William,
The result was the same except that the base was <dc=granitemountain,
dc=com> with scope subtree instead of <dc=granitemountain,> with scope
subtree
Bob
-----Original Message-----
From: William Brown [mailto:wbrown@suse.de]
Sent: Monday, September 23, 2019 20:43
To: 389-users(a)lists.fedoraproject.org
Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
You need to quote it because else the shell thinks it's two arguments?
> On 24 Sep 2019, at 12:31, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
>
> William -
>
> I did it with this command:
> ldapsearch -b dc=granitemountain, dc=com -h $HOSTNAME -x -D
> 'cn=Directory Manager' -W
>
> The results were:
> # extended LDIF
> #
> # LDAPv3
> # base <dc=granitemountain,> with scope subtree # filter: dc=com #
> requesting: ALL #
>
> # search: results
> search: 2
> result: 32 No such object
>
> # numResponses: 1
>
> I am not sure what the ',' is doing in the base definition
> [<dc=granitemountain,>]
>
>
> Bob
>
> -----Original Message-----
> From: William Brown [mailto:wbrown@suse.de]
> Sent: Monday, September 23, 2019 19:37
> To: 389-users(a)lists.fedoraproject.org
> Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
>
> Can you do an ldapsearch -b dc=granitemountain, dc=com -h ... -x -D ... -W and see
what exists already?
>
>> On 24 Sep 2019, at 10:39, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
>>
>> William,
>>
>> I was trying it as you suggested. It now gets past the password issue. However, I
am not hitting another roadblock.
>>
>> The original entries in the file I created are:
>> dn: dc=granitemountain, dc=com
>> objectClass: domain
>> dc: granitemountain
>> dn: dc=pki, dc=granitemountain, dc=com
>> objectClass: domain
>> dc: pki
>>
>> When I created the file (without the leading tabs of course) I then used the
command:
>> ldapadd -f /tmp/ldapadd-file -h $HOSTNAME -x -D 'cn=Directory Manager'
>> -W as you suggested.
>>
>> That got me past the password issue. Now however, it created the
>> first record (for the granitemountain domain) but it now issues a new error.
>> The transcript is
>>
>> Adding new entry "dc=pki", dc=granitemountain, dc=com"
>> Ldap_add: No such object (32)
>>
>> Any thoughts?
>>
>> Bob
>>
>> -----Original Message-----
>> From: William Brown [mailto:wbrown@suse.de]
>> Sent: Monday, September 23, 2019 18:20
>> To: 389-users(a)lists.fedoraproject.org
>> Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
>>
>> Can you try the -f /file/of/changes rather than redirecting into the command?
>>
>>> On 24 Sep 2019, at 10:16, rtbell(a)GRANITEMOUNTAIN.COM wrote:
>>>
>>> William, thanks for responding. In the original command string I used -w
redhat123 instead of -W which causes a prompt for the password. In both cases, I got the
same error.
>>>
>>> -----Original Message-----
>>> From: William Brown [mailto:wbrown@suse.de]
>>> Sent: Monday, September 23, 2019 18:12
>>> To: 389-users(a)lists.fedoraproject.org
>>> Subject: [389-users] Re: Configuring the 389-ds-base on Fedora 30
>>>
>>>
>>>
>>>> On 24 Sep 2019, at 09:46, rtbell(a)granitemountain.com
<rtbell(a)GRANITEMOUNTAIN.COM> wrote:
>>>>
>>>> I have hit a roadblock and would appreciate any help I can get. I am
running in a VM Workstation virtualization platform on a Windows 10 host machine.
>>>>
>>>> I created a LAMP version of Fedora 30 using mariadb instead of mysql. I
changed the host name to
cn-poc-pki.granitemountain.com rebooted the system and verified
that the host name was correct. I added
cn-poc-pki.granitemountain.com to the hosts table
and rebooted again. I then used dnf install 389-ds-base to retrieve the 389-ds subsystem.
I used dscreate create-template ds.tmp to create a template. I used vim to update the
fields in the template file I am attaching the template file.
>>>>
>>>> When I try to assert an ldapadd –h $HOSTNAME –x –D “cn=DirectoryManager”
–W <<EOF with a number of additional parameters, I get an ldap_bind: Invalid
credentials (49) error message. Obviously I have misconfigured something but I have been
unable to discover what it might be. Could some of you experts please look at my
configuration and tell me what I screwed up, please?
>>>
>>> Hey there,
>>>
>>> I wonder if you try something like:
>>>
>>> ldapadd -f /path/to/file/of/changes -h $HOSTNAME -x -D
>>> 'cn=Directory Manager' -W
>>>
>>> If that works.
>>>
>>> I think that -W prompts, so right now you are echoing your changes as the
password perhaps.
>>>
>>> Hope that helps
>>>
>>>>
>>>> Bob Bell
>>>>
>>>> Granite Mountain Security Consultancy, LLC.
>>>> 90 W 500 South, #404
>>>> Bountiful UT 84010
>>>>
>>>> 801-971-4200 (cell)
>>>> rtbell(a)granitemountain.com
>>>>
>>>> "Beware the engineers of society, I say, who would make everyone
>>>> in all the world equal.
>>>> Opportunity should be equal, must be equal, but achievement must
>>>> remain individual.”
>>>> ---Drizzt Do’Urden
>>>>
>>>>
>>>>
>>>> <ds.tmp>_______________________________________________
>>>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>>>> unsubscribe send an email to
>>>> 389-users-leave(a)lists.fedoraproject.org
>>>> Fedora Code of Conduct:
>>>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>>>> List Guidelines:
>>>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>>> List Archives:
>>>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedo
>>>> r
>>>> a
>>>> p
>>>> r
>>>>
oject.org
>>>
>>> —
>>> Sincerely,
>>>
>>> William Brown
>>>
>>> Senior Software Engineer, 389 Directory Server SUSE Labs
>>> _______________________________________________
>>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>>> unsubscribe send an email to
>>> 389-users-leave(a)lists.fedoraproject.org
>>> Fedora Code of Conduct:
>>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>>> List Guidelines:
>>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>> List Archives:
>>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedor
>>> a p r
oject.org _______________________________________________
>>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>>> unsubscribe send an email to
>>> 389-users-leave(a)lists.fedoraproject.org
>>> Fedora Code of Conduct:
>>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>>> List Guidelines:
>>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>>> List Archives:
>>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedor
>>> a
>>> p
>>> r
>>>
oject.org
>>
>> —
>> Sincerely,
>>
>> William Brown
>>
>> Senior Software Engineer, 389 Directory Server SUSE Labs
>> _______________________________________________
>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines:
>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedora
>> p r
oject.org _______________________________________________
>> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
>> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>> Fedora Code of Conduct:
>>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>> List Guidelines:
>>
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedora
>> p
>> r
>>
oject.org
>
> —
> Sincerely,
>
> William Brown
>
> Senior Software Engineer, 389 Directory Server SUSE Labs
> _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorap
> r
oject.org _______________________________________________
> 389-users mailing list -- 389-users(a)lists.fedoraproject.org To
> unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
>
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines:
>
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorap
> r
>
oject.org
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server SUSE Labs
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org To
unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorapr
oject.org _______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org To
unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedorapr
oject.org
—
Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server SUSE Labs
_______________________________________________
389-users mailing list -- 389-users(a)lists.fedoraproject.org To unsubscribe send an email
to 389-users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct: