[Fedora-directory-users] problem importing DUAConfigProfile Schema in to FDS 7.1

[Justin Albstmeijer]

fedora-directory-users,

using: RHEL4 (update 1), fedora-ds-7.1-2.RHEL4

Trying to follow the instructions on
http://directory.fedora.redhat.com/wiki/Howto:SolarisClient.

Both the published DUAConfigProfile schema and the
http://web.singnet.com.sg/~garyttt/DUAConfigProfile.schema.txt converted
by ol-schema-migrate.pl don't seem to be able to be imported.

Both result in :

cn=schema: Error adding object 'dn: cn=schema'.  The error sent by the
server was 'Object class violation. missing required attribute
"objectclass"

Any suggestions?

---
Note: in my case the ol-schema-migrate.pl output did not include the
"objectClasses", had to fix this in the script by changing:

-  if ( /object[c|C]lass/ ) {
+  if ( /^object[c|C]lass/ ) {

(There where comments in the DUAConfigProfile with an "objectclass"
mentioned)
---

Justin

[Nathan Kinder]

Justin Albstmeijer wrote:

> fedora-directory-users,
>
> using: RHEL4 (update 1), fedora-ds-7.1-2.RHEL4
>
> Trying to follow the instructions on
> http://directory.fedora.redhat.com/wiki/Howto:SolarisClient.
>
> Both the published DUAConfigProfile schema and the
> http://web.singnet.com.sg/~garyttt/DUAConfigProfile.schema.txt converted
> by ol-schema-migrate.pl don't seem to be able to be imported.
>
> Both result in :
>
> cn=schema: Error adding object 'dn: cn=schema'.  The error sent by the
> server was 'Object class violation. missing required attribute
> "objectclass"
>
> Any suggestions?
>   
>  
You shouldn't be trying to add a new "cn=schema" entry, but instead
you 
should be adding
the "attributetype" and "objectclasses" attributes from the published

DUAConfigProfile schema
to the existing "cn=schema" entry.  You can do this with the ldapmodify 
tool.

The DUAConfig Profile schema output on the wiki appears
to be search output.

-NGK

> ---
> Note: in my case the ol-schema-migrate.pl output did not include the
> "objectClasses", had to fix this in the script by changing:
>
> -  if ( /object[c|C]lass/ ) {
> +  if ( /^object[c|C]lass/ ) {
>
> (There where comments in the DUAConfigProfile with an "objectclass"
> mentioned)
> ---
>
> Justin
>
>
>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
>

[Mike Jackson]

Justin Albstmeijer wrote:

> Both the published DUAConfigProfile schema and the
> http://web.singnet.com.sg/~garyttt/DUAConfigProfile.schema.txt converted
> by ol-schema-migrate.pl don't seem to be able to be imported.
>
>   
>  
Hi,
 I wrote that ol-schema-migrate.pl tool. My first bug report!

I have never seen this "objectIdentifier" definition before, but it 
looks like something OpenLDAP would do:

--

objectIdentifier	DUAConfSchemaOID	1.3.6.1.4.1.11.1.3.1

attributetype ( DUAConfSchemaOID:1.0

--

 I will possibly enhance the script to support that , although I really 
wonder how often it is used...


> ---
> Note: in my case the ol-schema-migrate.pl output did not include the
> "objectClasses", had to fix this in the script by changing:
>
> -  if ( /object[c|C]lass/ ) {
> +  if ( /^object[c|C]lass/ ) {
>
> (There where comments in the DUAConfigProfile with an "objectclass"
> mentioned)
>   
>  
Yes, I see what you mean.  I will fix this.

BR,
--
mike

[Rich Megginson]

Mike Jackson wrote:

>  Justin Albstmeijer wrote:
>
> > Both the published DUAConfigProfile schema and the
> > http://web.singnet.com.sg/~garyttt/DUAConfigProfile.schema.txt converted
> > by ol-schema-migrate.pl don't seem to be able to be imported.
> >
> >  
> >
>  Hi,
>  I wrote that ol-schema-migrate.pl tool. My first bug report!
>
>  I have never seen this "objectIdentifier" definition before, but it 
>  looks like something OpenLDAP would do:
>
>  -- 
>
>  objectIdentifier    DUAConfSchemaOID    1.3.6.1.4.1.11.1.3.1
>
>  attributetype ( DUAConfSchemaOID:1.0
>
>  -- 
>
>  I will possibly enhance the script to support that , although I really 
>  wonder how often it is used... 
I've seen it in several of the newer OpenLDAP schema files.  I doubt FDS 
will support that, since our schema files are in LDIF format you see if 
you do an ldapsearch of the cn=schema entry, and that syntax is not 
valid RFC2252.

> > ---
> > Note: in my case the ol-schema-migrate.pl output did not include the
> > "objectClasses", had to fix this in the script by changing:
> >
> > -  if ( /object[c|C]lass/ ) {
> > +  if ( /^object[c|C]lass/ ) {
> >
> > (There where comments in the DUAConfigProfile with an "objectclass"
> > mentioned)
> >  
> >
>
>  Yes, I see what you mean.  I will fix this.
>
>  BR,
>  -- 
>  mike
>
>  -- 
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Justin Albstmeijer]

I suppose someone got it to work? non of the previous suggestions did the
trick.

Anyone? I seem to be looking for a modify ldif file to import the
DUAConfigProfile Schema

Justin

[Susan]

I'm having a problem similar to yours (after running
the ol-schema-migrate.pl:

# ./start-slapd 
[19/Aug/2005:10:43:09 -0400] dse - The entry cn=schema
in file
/opt/fedora-ds/slapd-cnyitlin02/config/schema/61solaris.ldif
is invalid, error code 21 (Invalid syntax) - attribute
type nisDomain: Missing attribute syntax OID

This is after I removed the 61dua...file.  That one
bombs as well.

Anybody has a working pair of those 2 schemas, in FDS
ldif format I can use?

Thank you.
--- Justin Albstmeijer <justin(a)VLAMea.nl&gt; wrote:

>  
>  I suppose someone got it to work? non of the
>  previous suggestions did the
>  trick.
>  
>  Anyone? I seem to be looking for a modify ldif file
>  to import the
>  DUAConfigProfile Schema
>  
>  Justin
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  
https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

[Justin Albstmeijer]

Igor,

Yes got it to work eventually.
Just copy these two files to
/opt/fedora-ds/slapd-cnyitlin02/config/schema/ and restart de slapd
instance.

Justin

>  I'm having a problem similar to yours (after running
>  the ol-schema-migrate.pl:
>
>  # ./start-slapd
>  [19/Aug/2005:10:43:09 -0400] dse - The entry cn=schema
>  in file
>  /opt/fedora-ds/slapd-cnyitlin02/config/schema/61solaris.ldif
>  is invalid, error code 21 (Invalid syntax) - attribute
>  type nisDomain: Missing attribute syntax OID
>
>  This is after I removed the 61dua...file.  That one
>  bombs as well.
>
>  Anybody has a working pair of those 2 schemas, in FDS
>  ldif format I can use?
>
>  Thank you.
>  --- Justin Albstmeijer <justin(a)VLAMea.nl&gt; wrote:
>
> >
> > I suppose someone got it to work? non of the
> > previous suggestions did the
> > trick.
> >
> > Anyone? I seem to be looking for a modify ldif file
> > to import the
> > DUAConfigProfile Schema
> >
> > Justin
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users(a)redhat.com
> >
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>
>
>  __________________________________________________
>  Do You Yahoo!?
>  Tired of spam?  Yahoo! Mail has the best spam protection around
>  http://mail.yahoo.com
>
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>

[Mike Jackson]

Igor wrote:

> I'm having a problem similar to yours (after running
> the ol-schema-migrate.pl:
>
> # ./start-slapd 
> [19/Aug/2005:10:43:09 -0400] dse - The entry cn=schema
> in file
> /opt/fedora-ds/slapd-cnyitlin02/config/schema/61solaris.ldif
> is invalid, error code 21 (Invalid syntax) - attribute
> type nisDomain: Missing attribute syntax OID
>
> This is after I removed the 61dua...file.  That one
> bombs as well.
>
> Anybody has a working pair of those 2 schemas, in FDS
> ldif format I can use?
>   
>  
Hi,
 Please send me a copy of your original schema, so that I can make 
corrections to the schema migration tool.

BR,
Mike

[Susan]

Mike, I got the original schema from Gary's site:

http://web.singnet.com.sg/~garyttt/DUAConfigProfile.schema.txt

--- Mike Jackson <mj(a)sci.fi&gt; wrote:

>  Igor wrote:
>  
>  >I'm having a problem similar to yours (after
>  running
>  >the ol-schema-migrate.pl:
>  >
>  ># ./start-slapd 
>  >[19/Aug/2005:10:43:09 -0400] dse - The entry
>  cn=schema
>  >in file
>
> /opt/fedora-ds/slapd-cnyitlin02/config/schema/61solaris.ldif
>  >is invalid, error code 21 (Invalid syntax) -
>  attribute
>  >type nisDomain: Missing attribute syntax OID
>  >
>  >This is after I removed the 61dua...file.  That one
>  >bombs as well.
>  >
>  >Anybody has a working pair of those 2 schemas, in
>  FDS
>  >ldif format I can use?
>  >  
>  >
>  
>  Hi,
>   Please send me a copy of your original schema, so
>  that I can make 
>  corrections to the schema migration tool.
>  
>  BR,
>  Mike
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  
https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

[Mike Jackson]

Igor wrote:

> Mike, I got the original schema from Gary's site:
>
> http://web.singnet.com.sg/~garyttt/DUAConfigProfile.schema.txt
>
> --- Mike Jackson <mj(a)sci.fi&gt; wrote:
>
>   
>  
I mean that 61solaris.ldif. Can you show me that one before it was 
converted?

--
mike

[Susan]

this is it.

--- Mike Jackson <mj(a)sci.fi&gt; wrote:

>  Igor wrote:
>  
>  >Mike, I got the original schema from Gary's site:
>  >
>
> http://web.singnet.com.sg/~garyttt/DUAConfigProfile.schema.txt
>  >
>  >--- Mike Jackson <mj(a)sci.fi&gt; wrote:
>  >
>  >  
>  >
>  
>  I mean that 61solaris.ldif. Can you show me that one
>  before it was 
>  converted?
>  
>  --
>  mike
>  
>  --
>  Fedora-directory-users mailing list
>  Fedora-directory-users(a)redhat.com
>  
https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

		
__________________________________ 
Yahoo! Mail 
Stay connected, organized, and protected. Take the tour: 
http://tour.mail.yahoo.com/mailtour.html 

# http://www.int-evry.fr/mci/user/procacci/ldap/solaris.schema
#
# solaris.schema
# ''works in progress and incomplete''.  
# It would help if sun would publish this information! 
# If you have any comments/suggestion/correction
# please let me know (igor(a)ipass.net)
# 
# Some correction on oid and attributetype
# were made by Marc Bourget (bourget(a)up2.com)
# Up2 Technologies (div. Teleglobe Communication Corp)
# oid number and additional attributetype were taken from:
# Solaris and LDAP Naming Service, Deploying LDAP in the Enterprise.
# Tom Bialanski and Michael Haines, Sun Microsystems Press,
# A Prentice Hall Title, 2001, ISBN 0-13-030678-9

# Sun nisMapEntry attributes
attributetype ( 1.3.6.1.1.1.1.28
        NAME 'nisPublickey'
        DESC 'nisPublickey'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.1.1.1.29
        NAME 'nisSecretkey'
        DESC 'nisSecretkey'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.1.1.1.12 SUP name
        NAME 'nisDomain' )

# Sun additional attributes to RFC2307 attributes (NIS)
attributetype ( 2.16.840.1.113730.3.1.30
        NAME 'mgrpRFC822MailMember'
        DESC 'mgrpRFC822MailMember'
        EQUALITY caseIgnoreIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

#attributetype ( 1.3.6.1.4.1.42.2.27.2.1.15
#        NAME 'rfc822MailMember'
#        DESC 'rfc822MailMember'
#        EQUALITY caseIgnoreIA5Match
#        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.42.2.27.1.1.12
        NAME 'nisNetIdUser'
        DESC 'nisNetIdUser'
        EQUALITY caseExactIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.42.2.27.1.1.13
        NAME 'nisNetIdGroup'
        DESC 'nisNetIdGroup'
        EQUALITY caseExactIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

attributetype ( 1.3.6.1.4.1.42.2.27.1.1.14
        NAME 'nisNetIdHost'
        DESC 'nisNetIdHost'
        EQUALITY caseExactIA5Match
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

# Sun NIS publickey objectclass
objectclass ( 1.3.6.1.1.1.2.14
        NAME 'NisKeyObject'
        DESC 'NisKeyObject'
        SUP top
        MUST ( cn $ nisPublickey $ nisSecretkey )
        MAY ( uidNumber $ description ) )

# Sun NIS domain objectclass
objectclass ( 1.3.1.6.1.1.1.2.15
        NAME 'nisDomainObject'
        DESC 'nisDomainObject'
        SUP top AUXILIARY
        MUST ( nisDomain ) )

# Sun NIS mailGroup objectclass
objectclass ( 2.16.840.1.113730.3.2.4
        NAME 'mailGroup'
        DESC 'mailGroup'
        SUP top
        MUST ( mail )
        MAY ( cn $ mgrpRFC822MailMember ) )

# Sun NIS nisMailAlias objectclass
#objectclass ( 1.3.6.1.4.1.42.2.27.1.2.5
#        NAME 'nisMailAlias'
#        DESC 'nisMailAlias'
#        SUP top
#        MUST ( cn )
#        MAY ( rfc822mailMember ) )

# Sun NIS nisNetId objectclass
objectclass ( 1.3.6.1.4.1.42.2.27.1.2.6
        NAME 'nisNetId'
        DESC 'nisNetId'
        SUP top
        MUST ( cn )
        MAY ( nisNetIdUser $ nisNetIdGroup $ nisNetIdHost ) )

# Below is optional unless you want to use ldap_gen_profile
attributetype ( 1.3.6.1.4.1.42.2.27.5.1.15 SUP name
        NAME 'SolarisLDAPServers'
        DESC 'SolarisLDAPServers'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.16 SUP name
        NAME 'SolarisSearchBaseDN'
        DESC 'SolarisSearchBaseDN'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.17 
        NAME 'SolarisCacheTTL'
        DESC 'SolarisCacheTTL'
        EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.18 SUP name
        NAME 'SolarisBindDN'
        DESC 'SolarisBindDN'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.19 SUP name
        NAME 'SolarisBindPassword'
        DESC 'SolarisBindPassword'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.20 SUP name
        NAME 'SolarisAuthMethod'
        DESC 'SolarisAuthMethod'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.21 SUP name
        NAME 'SolarisTransportSecurity'
        DESC 'SolarisTransportSecurity'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.24 SUP name
        NAME 'SolarisDataSearchDN'
        DESC 'SolarisDataSearchDN'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.25 SUP name
        NAME 'SolarisSearchScope'
        DESC 'SolarisSearchScope'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.26 
        NAME 'SolarisSearchTimeLimit'
        DESC 'SolarisSearchTimeLimit'
        EQUALITY integerMatch
        SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.27 SUP name
        NAME 'SolarisPreferedServer'
        DESC 'SolarisPreferedServer' )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.28 SUP name
        NAME 'SolarisPreferedServerOnly'
        DESC 'SolarisPreferedServerOnly'
        SINGLE-VALUE )

attributetype ( 1.3.6.1.4.1.42.2.27.5.1.29 SUP name
        NAME 'SolarisSearchReferral'
        DESC 'SolarisSearchReferral'
        SINGLE-VALUE )

objectclass ( 1.3.6.1.4.1.42.2.27.5.2.7
        NAME 'SolarisNamingProfile'
        DESC 'Solaris LDAP NSS Profile'
        SUP top STRUCTURAL
        MUST ( cn $ SolarisLDAPServers )
        MAY ( SolarisBindDN $ SolarisBindPassword $ 
              SolarisSearchBaseDN $ SolarisAuthMethod $
              SolarisTransportSecurity $ SolarisSearchReferral $
              SolarisDataSearchDN $ SolarisSearchScope $
              SolarisSearchTimeLimit $ SolarisCacheTTL ) )

# End of solaris.schema