[389-users] Cannot delete domain

Thu Mar 5 09:23:13 UTC 2015

Of course:

ldapsearch -D "cn=Directory Manager" -W -b "dc=test,dc=mydomain,dc=tld"  
"(objectclass=*)" numsubordinates

# extended LDIF
#
# LDAPv3
# base <dc=test,dc=mydomain,dc=tld> with scope subtree
# filter: (objectclass=*)
# requesting: numsubordinates
#

# test.mydomain.tld
dn: dc=test,dc=mydomain,dc=tld
numsubordinates: 1

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

BR, Christian

On 05.03.2015 10:16, German Parente wrote:
> Could you please try again:
> 
> ldapsearch -D "cn=Directory Manager" -W -b
> "dc=test,dc=mydomain,dc=tld"  "(objectclass=*)" numsubordinates
> 
> Thanks a lot,
> 
> German.
> 
> ----- Original Message -----
>> From: "Christian Katterl" <christian at katterl.eu>
>> To: "General discussion list for the 389 Directory server project." 
>> <389-users at lists.fedoraproject.org>
>> Sent: Thursday, 5 March, 2015 10:08:39 AM
>> Subject: Re: [389-users] Cannot delete domain
>> 
>> Hi,
>> 
>> unfortunately, it's still there - nothing changed.
>> 
>> BR, Christian
>> 
>> 
>> On 05.03.2015 09:58, German Parente wrote:
>> > ----- Original Message -----
>> >> From: "Christian Katterl" <christian at katterl.eu>
>> >> To: "General discussion list for the 389 Directory server project."
>> >> <389-users at lists.fedoraproject.org>
>> >> Sent: Thursday, 5 March, 2015 8:46:19 AM
>> >> Subject: Re: [389-users] Cannot delete domain
>> >>
>> >>
>> >>
>> >> Hi,
>> >>
>> >>
>> >>
>> >> i tried:
>> >>
>> >>
>> >>
>> >> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
>> >> -W
>> >> "(objectclass=*)" *numsubordinates*
>> >>
>> >
>> >
>> > Seems your entry has finally been deleted. So, now, we cannot go on
>> > troubleshooting this issue.
>> >
>> > Regards,
>> >
>> > German.
>> >
>> >
>> >
>> >
>> >
>> >> # extended LDIF
>> >> #
>> >> # LDAPv3
>> >> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
>> >> # filter: (objectclass=*)
>> >> # requesting: *numsubordinates *
>> >> #
>> >>
>> >> # search result
>> >> search: 2
>> >> result: 32 No such object
>> >>
>> >> # numResponses: 1
>> >>
>> >>
>> >>
>> >> BR, Christian
>> >>
>> >>
>> >>
>> >>
>> >>
>> >> On 04.03.2015 20:11, Noriko Hosoi wrote:
>> >>
>> >>
>> >> On 03/04/2015 10:53 AM, Noriko Hosoi wrote:
>> >>
>> >>
>> >> Well, it is an error message issue... You cannot "delete" your suffix.
>> >> Sorry,
>> >> please iignore this statement. I could delete it. Continue
>> >> investigating...
>> >>
>> >> BTW, could you run this command line again replacing num b
>> >> subordinates with
>> >> numsubordinates ?
>> >> > ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld" -W
>> >> > "(objectclass=*)" numsubordinates
>> >>
>> >> Thanks,
>> >> --noriko
>> >>
>> >>
>> >> To do so, you need to delete the backend togather.
>> >>
>> >> $ ldapsearch -LLLx ... -b "dc=example,dc=com" -s base
>> >> "(objectclass=*)" dn
>> >> dn: dc=example,dc=com
>> >>
>> >> $ ldapdelete -x ...
>> >> dc=example,dc=com
>> >> ldap_delete: Operation not allowed on non-leaf (66)
>> >>
>> >>
>> >> On 03/04/2015 03:50 AM, Christian Katterl wrote:
>> >>
>> >>
>> >> Hi,
>> >>
>> >> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
>> >> "(objectclass=nsTombstone)" -W
>> >>
>> >> # extended LDIF
>> >> #
>> >> # LDAPv3
>> >> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
>> >> # filter: (objectclass=nsTombstone)
>> >> # requesting: ALL
>> >> #
>> >>
>> >> # search result
>> >> search: 2
>> >> result: 0 Success
>> >>
>> >> # numResponses: 1
>> >>
>> >>
>> >> and...
>> >>
>> >> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
>> >> -W
>> >> "(objectclass=*)" numbsubordinates
>> >>
>> >> # extended LDIF
>> >> #
>> >> # LDAPv3
>> >> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
>> >> # filter: (objectclass=*)
>> >> # requesting: numbsubordinates
>> >> #
>> >>
>> >> # test.mydomain.tld
>> >> dn: dc=test,dc=mydomain,dc=tld
>> >>
>> >> # search result
>> >> search: 2
>> >> result: 0 Success
>> >>
>> >> # numResponses: 2
>> >> # numEntries: 1
>> >>
>> >>
>> >> BR, Christian
>> >>
>> >>
>> >>
>> >>
>> >> Am 04.03.2015 11:59, schrieb German Parente:
>> >>
>> >>
>> >> Hi Christian,
>> >>
>> >> there has been a bug fixed for your issue but in release 1.2.11.15-34.
>> >>
>> >> https://fedorahosted.org/389/ticket/47367
>> >>
>> >>
>> >> Could you do this query ?
>> >>
>> >> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
>> >> "(objectclass=nsTombstone)" -W
>> >>
>> >> and also
>> >>
>> >> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
>> >> -W "(objectclass=*)" numbsubordinates
>> >>
>> >> ?
>> >>
>> >> Thanks and regards,
>> >>
>> >> German.
>> >>
>> >>
>> >>
>> >> ----- Original Message -----
>> >>
>> >>
>> >> From: "Christian Katterl" <christian at katterl.eu>
>> >> To: 389-users at lists.fedoraproject.org
>> >> Sent: Wednesday, 4 March, 2015 9:30:39 AM
>> >> Subject: [389-users] Cannot delete domain
>> >>
>> >> Dear all,
>> >>
>> >> I am using 389-ds version 1.2.11.30-1 (shipped with kolab).
>> >> Trying to delete a domain gives the following error: ldap_delete:
>> >> Operation not allowed on non-leaf (66)
>> >>
>> >> Is this a (known) bug, or am I doing something wrong?
>> >>
>> >> I tried to delete the domain using:
>> >> ldapdelete -c -x -D "cn=Directory Manager" -W -r
>> >> "dc=test,dc=mydomain,dc=tld"
>> >>
>> >> When I am looking for entries, there seems to be no remaining element:
>> >>
>> >> ldapsearch -D "cn=Directory Manager" -b "dc=test,dc=mydomain,dc=tld"
>> >> "(objectclass=*)" -W
>> >>
>> >> # extended LDIF
>> >> #
>> >> # LDAPv3
>> >> # base <dc=test,dc=mydomain,dc=tld> with scope subtree
>> >> # filter: (objectclass=*)
>> >> # requesting: ALL
>> >> #
>> >>
>> >> # test.mydomain.tld
>> >> dn: dc=test,dc=mydomain,dc=tld
>> >> dc: test
>> >> objectClass: top
>> >> objectClass: domain
>> >>
>> >> # search result
>> >> search: 2
>> >> result: 0 Success
>> >>
>> >> # numResponses: 2
>> >> # numEntries: 1
>> >>
>> >> I replaced my real domain-name with test.mydomain.tld
>> >>
>> >> The installation is a single ldap-host with no synchronization or
>> >> so...
>> >> Can anyone help?
>> >>
>> >> BR, Christian
>> >> --
>> >> 389 users mailing list
>> >> 389-users at lists.fedoraproject.org
>> >> https://admin.fedoraproject.org/mailman/listinfo/389-users --
>> >> 389 users mailing list
>> >> 389-users at lists.fedoraproject.org
>> >> https://admin.fedoraproject.org/mailman/listinfo/389-users --
>> >> 389 users mailing list
>> >> 389-users at lists.fedoraproject.org
>> >> https://admin.fedoraproject.org/mailman/listinfo/389-users
>> >> --
>> >> 389 users mailing list
>> >> 389-users at lists.fedoraproject.org
>> >> https://admin.fedoraproject.org/mailman/listinfo/389-users
>> >>
>> >> --
>> >> 389 users mailing list 389-users at lists.fedoraproject.org
>> >> https://admin.fedoraproject.org/mailman/listinfo/389-users
>> >>
>> >>
>> >>
>> >>
>> >> --
>> >> 389 users mailing list
>> >> 389-users at lists.fedoraproject.org
>> >> https://admin.fedoraproject.org/mailman/listinfo/389-users
>> > --
>> > 389 users mailing list
>> > 389-users at lists.fedoraproject.org
>> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>> --
>> 389 users mailing list
>> 389-users at lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users