ldapdelete error

[Ghiurea, Isabella]

Hi List,
I am seeing the following error when trying to delete a group from a standalone DS there  is no replication cfg  , any tips what is the explanation of this error ?
( member of plugin is enabled for  DS)

ldapdelete  -D "cn=directory manager"  -W -x 'ou=XXXXXt' 'cn=XXXX''

ldap_delete: Operation not allowed on non-leaf (66)
        additional info: Entry has replication conflicts as children

Thank you

Isabella

[Pierre Rogier]

Hi Isabella,

This error means that the group is not a leaf in the Directory Information
Tree but a node (In other words, there are children entries below the group
(and you need to deleted or move them before being able to delete the tree
)

On Mon, Jul 31, 2023 at 4:55 PM Ghiurea, Isabella <
[e-mail]> wrote:
> Hi List,
> I am seeing the following error when trying to delete a group from a
> standalone DS there  is no replication cfg  , any tips what is the
> explanation of this error ?
> ( member of plugin is enabled for  DS)
>
> ldapdelete  -D "cn=directory manager"  -W -x 'ou=XXXXXt' 'cn=XXXX''
>
> ldap_delete: Operation not allowed on non-leaf (66)
>         additional info: Entry has replication conflicts as children
>
> Thank you
>
> Isabella
> _______________________________________________
> 389-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]....
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue

[Pierre Rogier]

And "Entry has replication conflicts as children" probably means that the
entries looks like a replication conflict entry (maybe imported from ldif
of a replicated topology)
But anyway a subtree search using the group dn on base dn should show the
children entries

On Mon, Jul 31, 2023 at 5:37 PM Pierre Rogier  wrote:
> Hi Isabella,
>
> This error means that the group is not a leaf in the Directory Information
> Tree but a node (In other words, there are children entries below the group
> (and you need to deleted or move them before being able to delete the tree
> )
>
> On Mon, Jul 31, 2023 at 4:55 PM Ghiurea, Isabella <
> [e-mail]> wrote:
> > Hi List,
> > I am seeing the following error when trying to delete a group from a
> > standalone DS there  is no replication cfg  , any tips what is the
> > explanation of this error ?
> > ( member of plugin is enabled for  DS)
> >
> > ldapdelete  -D "cn=directory manager"  -W -x 'ou=XXXXXt' 'cn=XXXX''
> >
> > ldap_delete: Operation not allowed on non-leaf (66)
> >         additional info: Entry has replication conflicts as children
> >
> > Thank you
> >
> > Isabella
> > _______________________________________________
> > 389-users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedoraproject.org/archives/list/[e-mail]....
> > Do not reply to spam, report it:
> > https://pagure.io/fedora-infrastructure/new_issue
> --
>
> 389 Directory Server Development Team

[Pierre Rogier]

If objectclass=* filter does not returns the children entry you should try
"(objectclass=ldapsubentry)" as filter

On Mon, Jul 31, 2023 at 5:43 PM Pierre Rogier  wrote:
> And "Entry has replication conflicts as children" probably means that the
> entries looks like a replication conflict entry (maybe imported from ldif
> of a replicated topology)
> But anyway a subtree search using the group dn on base dn should show the
> children entries
>
> On Mon, Jul 31, 2023 at 5:37 PM Pierre Rogier  wrote:
> > Hi Isabella,
> >
> > This error means that the group is not a leaf in the Directory
> > Information Tree but a node (In other words, there are children entries
> > below the group (and you need to deleted or move them before being able to
> > delete the tree )
> >
> > On Mon, Jul 31, 2023 at 4:55 PM Ghiurea, Isabella <
> > [e-mail]> wrote:
> > > Hi List,
> > > I am seeing the following error when trying to delete a group from a
> > > standalone DS there  is no replication cfg  , any tips what is the
> > > explanation of this error ?
> > > ( member of plugin is enabled for  DS)
> > >
> > > ldapdelete  -D "cn=directory manager"  -W -x 'ou=XXXXXt' 'cn=XXXX''
> > >
> > > ldap_delete: Operation not allowed on non-leaf (66)
> > >         additional info: Entry has replication conflicts as children
> > >
> > > Thank you
> > >
> > > Isabella
> > > _______________________________________________
> > > 389-users mailing list -- [e-mail]
> > > To unsubscribe send an email to [e-mail]
> > > Fedora Code of Conduct:
> > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> > > https://lists.fedoraproject.org/archives/list/[e-mail]....
> > > Do not reply to spam, report it:
> > > https://pagure.io/fedora-infrastructure/new_issue
> > --
> >
> > 389 Directory Server Development Team
> --
>
> 389 Directory Server Development Team

[Ghiurea, Isabella]

Thank you for reply but

I am not seeing any  entries when filter for objectclass=*,  what I am missing ?

ldapsearch -x -h "XXX" -b "ou=groups,ou=ds,dc=XXX" -D "cn=directory manager" -W 'cn=ABC' "(objectclass=*)"

________________________________
From: Ghiurea, Isabella
Sent: Monday, July 31, 2023 7:55:04 AM
To: [e-mail]
Subject: ldapdelete error

Hi List,
I am seeing the following error when trying to delete a group from a standalone DS there  is no replication cfg  , any tips what is the explanation of this error ?
( member of plugin is enabled for  DS)

ldapdelete  -D "cn=directory manager"  -W -x 'ou=XXXXXt' 'cn=XXXX''

ldap_delete: Operation not allowed on non-leaf (66)
        additional info: Entry has replication conflicts as children

Thank you

Isabella

[Pierre Rogier]

I am a bit puzzled by:  'cn=ABC' "(objectclass=*)"
  Looks like there are 2 filters (I suspect that "(objectclass=*)"  was
interpreted as an attribute name, but not sure ... )

Anyway "(objectclass=*)"  may not show all the entries
 There may be some hidden entries (subentries) but
 "(|objectclass=ldapsubentry)((objectclass=*))" should show both the
entries and the subentries

On Mon, Jul 31, 2023 at 6:48 PM Ghiurea, Isabella <
[e-mail]> wrote:
> Thank you for reply but
>
> I am not seeing any  entries when filter for objectclass=*,  what I am
> missing ?
>
> ldapsearch -x -h "XXX" -b "ou=groups,ou=ds,dc=XXX" -D "cn=directory
> manager" -W 'cn=ABC' "(objectclass=*)"
>
> *From:* Ghiurea, Isabella
> *Sent:* Monday, July 31, 2023 7:55:04 AM
> *To:* [e-mail]
> *Subject:* ldapdelete error
>
> Hi List,
> I am seeing the following error when trying to delete a group from a
> standalone DS there  is no replication cfg  , any tips what is the
> explanation of this error ?
> ( member of plugin is enabled for  DS)
>
> ldapdelete  -D "cn=directory manager"  -W -x 'ou=XXXXXt' 'cn=XXXX''
>
> ldap_delete: Operation not allowed on non-leaf (66)
>         additional info: Entry has replication conflicts as children
>
> Thank you
>
> Isabella
> _______________________________________________
> 389-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]....
> Do not reply to spam, report it:
> https://pagure.io/fedora-infrastructure/new_issue