[389-users] Cannot delete domain

German Parente gparente at redhat.com
Thu Mar 5 08:58:10 UTC 2015



----- Original Message -----
> From: "Christian Katterl" <christian at katterl.eu>
> To: "General discussion list for the 389 Directory server project." <389-users at lists.fedoraproject.org>
> Sent: Thursday, 5 March, 2015 8:46:19 AM
> Subject: Re: [389-users] Cannot delete domain
> 
> 
> 
> Hi,
> 
> 
> 
> i tried:
> 
> 
> 
> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld" -W
> "(objectclass=*)" *numsubordinates*
> 


Seems your entry has finally been deleted. So, now, we cannot go on troubleshooting this issue.

Regards,

German.





> # extended LDIF
> #
> # LDAPv3
> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
> # filter: (objectclass=*)
> # requesting: *numsubordinates *
> #
> 
> # search result
> search: 2
> result: 32 No such object
> 
> # numResponses: 1
> 
> 
> 
> BR, Christian
> 
> 
> 
> 
> 
> On 04.03.2015 20:11, Noriko Hosoi wrote:
> 
> 
> On 03/04/2015 10:53 AM, Noriko Hosoi wrote:
> 
> 
> Well, it is an error message issue... You cannot "delete" your suffix. Sorry,
> please iignore this statement. I could delete it. Continue investigating...
> 
> BTW, could you run this command line again replacing num b subordinates with
> numsubordinates ?
> > ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld" -W
> > "(objectclass=*)" numsubordinates
> 
> Thanks,
> --noriko
> 
> 
> To do so, you need to delete the backend togather.
> 
> $ ldapsearch -LLLx ... -b "dc=example,dc=com" -s base "(objectclass=*)" dn
> dn: dc=example,dc=com
> 
> $ ldapdelete -x ...
> dc=example,dc=com
> ldap_delete: Operation not allowed on non-leaf (66)
> 
> 
> On 03/04/2015 03:50 AM, Christian Katterl wrote:
> 
> 
> Hi,
> 
> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
> "(objectclass=nsTombstone)" -W
> 
> # extended LDIF
> #
> # LDAPv3
> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
> # filter: (objectclass=nsTombstone)
> # requesting: ALL
> #
> 
> # search result
> search: 2
> result: 0 Success
> 
> # numResponses: 1
> 
> 
> and...
> 
> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld" -W
> "(objectclass=*)" numbsubordinates
> 
> # extended LDIF
> #
> # LDAPv3
> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
> # filter: (objectclass=*)
> # requesting: numbsubordinates
> #
> 
> # test.mydomain.tld
> dn: dc=test,dc=mydomain,dc=tld
> 
> # search result
> search: 2
> result: 0 Success
> 
> # numResponses: 2
> # numEntries: 1
> 
> 
> BR, Christian
> 
> 
> 
> 
> Am 04.03.2015 11:59, schrieb German Parente:
> 
> 
> Hi Christian,
> 
> there has been a bug fixed for your issue but in release 1.2.11.15-34.
> 
> https://fedorahosted.org/389/ticket/47367
> 
> 
> Could you do this query ?
> 
> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
> "(objectclass=nsTombstone)" -W
> 
> and also
> 
> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
> -W "(objectclass=*)" numbsubordinates
> 
> ?
> 
> Thanks and regards,
> 
> German.
> 
> 
> 
> ----- Original Message -----
> 
> 
> From: "Christian Katterl" <christian at katterl.eu>
> To: 389-users at lists.fedoraproject.org
> Sent: Wednesday, 4 March, 2015 9:30:39 AM
> Subject: [389-users] Cannot delete domain
> 
> Dear all,
> 
> I am using 389-ds version 1.2.11.30-1 (shipped with kolab).
> Trying to delete a domain gives the following error: ldap_delete:
> Operation not allowed on non-leaf (66)
> 
> Is this a (known) bug, or am I doing something wrong?
> 
> I tried to delete the domain using:
> ldapdelete -c -x -D "cn=Directory Manager" -W -r
> "dc=test,dc=mydomain,dc=tld"
> 
> When I am looking for entries, there seems to be no remaining element:
> 
> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
> "(objectclass=*)" -W
> 
> # extended LDIF
> #
> # LDAPv3
> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
> # filter: (objectclass=*)
> # requesting: ALL
> #
> 
> # test.mydomain.tld
> dn: dc=test,dc=mydomain,dc=tld
> dc: test
> objectClass: top
> objectClass: domain
> 
> # search result
> search: 2
> result: 0 Success
> 
> # numResponses: 2
> # numEntries: 1
> 
> I replaced my real domain-name with test.mydomain.tld
> 
> The installation is a single ldap-host with no synchronization or so...
> Can anyone help?
> 
> BR, Christian
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
> 
> --
> 389 users mailing list 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
> 
> 
> 
> 
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users



More information about the 389-users mailing list