[389-users] Samba & 389 Directory Server Integration

[Janet Houser]

Hi Folks,

I'm running DS-389 (version: 1.3.7.5 ; Build: 2018.178.1311) on a Cent 
OS 7 vs. 7.6.1810) system.  I've been working
through the Samba & 389 Directory Server Integration 
<https://directory.fedoraproject.org/docs/389ds/howto/howto-samba.html#stq...

doc and I've hit a snag.   I've obtained my SID using the "net
getlocalsid"
command, but when I create my .ldif file (see below):


[root]# cat sambaDomainName.ldif
dn: sambaDomainName=WORKGROUP,dc=test,dc=example,dc=com   (changed for 
security)
objectclass: sambaDomain
objectclass: sambaUnixIdPool
objectclass: top
sambaDomainName: WORKGROUP
sambaSID: S-1-5-21-xxxxxxxxx-xxxxxxxx-xxxxxxx   (removed for security)
uidNumber: 550
gidNumber: 550


And attempt to import it into my DS server using:


/usr/lib64/dirsrv/slapd-<name>/ldif2ldap  "cn=Directory manager" 
password ./sambaDomainName.ldif
/usr/lib64/dirsrv/slapd-<name>/ldif2ldap  "cn=Directory 
manager,dc=test,dc=example,dc=com" password ./sambaDomainName.ldif

I get an error:

Options:
         -Z serverID  - Server instance identifier
         -D rootdn    - Directory Manager DN
         -w passwd    - Directory Manager password
         -f file      - File containing LDAP entries to add to the server
         -P protocol  - STARTTLS, LDAPS, LDAPI, LDAP
         -h           - Display usage


I tried modifying the command in various ways:

/usr/lib64/dirsrv/slapd-<name>/ldif2ldap  -D "cn=Directory Manager" -w 
<my DS password> -f /sambaDomainName.ldif

and I've even used the /usr/sbin/ldif2ldap executable and have only 
gotten errors about the usage.   From the messages it looks like I
don't need the -Z server ID in the command since I have only one 
instance running on the server.

I'm sure I'm missing the obvious but I was hoping an experienced eye 
might have an easier time finding it.

Any suggestions would be appreciated.

Thanks,