Preserving create & modifyTimestamp during import

[Jan Tomasek]

Hi,

I need to import sub-suffix into the existing suffix on a running 
server. When I use:

dsconf -D "cn=Directory Manager" -w "$pswd" ldap://localhost backend 
import userRoot sub-suffix.ldif

than userRoot is truncated and later import fails with error:

[13/Apr/2021:15:08:41.180921374 +0200] - WARN - import_foreman - import 
userRoot: Skipping entry "o=sub,o=suffix" which has no parent, ending at 
line 36 of file "/root/sub-suffix.ldif"

One way is to dump existing userRoot and later re-import complete backend:

dsconf -D "cn=Directory Manager" -w "$pswd" ldap://localhost backend 
import userRoot suffix.ldif sub-suffix.ldif

But that means downtime I'm trying to avoid.

Other import way is use ldapadd but that means that server replaces 
operational attributes:
	creatorsName
	modifiersName
	createTimestamp
	modifyTimestamp

Is there a way how to import sub-suffix into existing and running server 
and preserve those operational attributes at the same time?

Thanks
-- 
-----------------------
Jan Tomasek aka Semik
http://www.tomasek.cz/

[William Brown]

>  On 13 Apr 2021, at 23:38, Jan Tomasek <jan(a)tomasek.cz&gt; wrote:
>  
>  Hi,
>  
>  I need to import sub-suffix into the existing suffix on a running server. When I use:
>  
>  dsconf -D "cn=Directory Manager" -w "$pswd" ldap://localhost backend
> import userRoot sub-suffix.ldif
>  
>  than userRoot is truncated and later import fails with error:
>  
>  [13/Apr/2021:15:08:41.180921374 +0200] - WARN - import_foreman - import userRoot:
> Skipping entry "o=sub,o=suffix" which has no parent, ending at line 36 of file
> "/root/sub-suffix.ldif"
>  
>  One way is to dump existing userRoot and later re-import complete backend:
>  
>  dsconf -D "cn=Directory Manager" -w "$pswd" ldap://localhost backend
> import userRoot suffix.ldif sub-suffix.ldif
>  
>  But that means downtime I'm trying to avoid. 
Without code changes, I think this is going to involve downtime. 

A possible way to handle this is if you have multiple replicas, you can do the import on a
single replica offline, join it to the topology, and the re-init the data over your other
machines.

Sorry :( 

>  
>  Other import way is use ldapadd but that means that server replaces operational
> attributes:
>  	creatorsName
>  	modifiersName
>  	createTimestamp
>  	modifyTimestamp
>  
>  Is there a way how to import sub-suffix into existing and running server and preserve
> those operational attributes at the same time?
>  
>  Thanks
>  -- 
>  -----------------------
>  Jan Tomasek aka Semik
>  http://www.tomasek.cz/
>  _______________________________________________
>  389-users mailing list -- 389-users(a)lists.fedoraproject.org
>  To unsubscribe send an email to 389-users-leave(a)lists.fedoraproject.org
>  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]...
>  Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
—
Sincerely,

William Brown

Senior Software Engineer, 389 Directory Server
SUSE Labs, Australia