Re: [389-users] Setting up sub-suffix on 1.2.11.15-31 (CentOS 6.5)

On 02/18/2014 02:52 PM, Brian Epstein wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello 389-users,
>
> I recently setup two new 389-ds servers in a multi-master replicated
> pair. I am only replicating the userRoot database at this time.
>
> Everything is working well, SSL is setup, replication is working on
> both nodes.
>
> I'm using CentOS 6.5 with the EPEL packages, everything is up to date.
>
> I would like this new multi-master pair to start being a read-only
> consumer for a few other ldap servers in our environment. Here is the
> tree breakdown.
>
> dc=ias,dc=edu (multi-master pair)
> dc=math,dc=ias,dc=edu (separate ldap server)
> dc=sns,dc=ias,dc=edu (separate ldap server)
> dc=itg,dc=ias,dc=edu (separate ldap server)
> dc=net,dc=ias,dc=edu (separate ldap server)
>
> If I'm reading things correctly, I need to have a separate database
> for each of the sub domains in order to setup a new replication agreement.
>
> So, I load up the Directory Server Console, navigate to Configuration
> - -> Data and right click on the suffix dc=ias,dc=edu. I select "New
> Sub Suffix" and fill it out. For example, I'll put in "dc=math" for
> the New Suffix, and create an associate database automatically and
> name it "math".
>
> One thing to note, the suffix dc=ias,dc=edu displays as
> "dc\3Dias\2Cdc\3Dedu". I'm guessing that the hex encoding isn't a big
> deal, but just in case....
>
> When I click "OK", I'm greeted with the following error.
>
> Undefined resource: mappingtree-error-add-mapping-msg.
> The suffix could not be created.
Please file a ticket at https://fedorahosted.org/389/newticket

In the meantime, you may have to use the command line to set up some of
the suffix/databases. See
https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Configuring_Directory_Databases.html#Creating_and_Maintaining_Suffixes-Creating_Suffixes

There should be command line instructions for everything.

>
> I must be missing something, although my Google-fu has been lacking
> on finding the answer. Am I headed down the right path for what I
> want to do?
>
> Thanks for your help,
> Brian
>
> - --
> Brian Epstein <bepstein@ias.edu> +1 609-734-8179
> Manager, Network and Security Institute for Advanced Study
> Key fingerprint = 128A 38F4 4CFA 5EDB 99CE 4734 6117 4C25 0371 C12A
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlMD1i8ACgkQYRdMJQNxwSp+dgCgqFP23lZ9WQ9PXKzb/yFMFa2U
> shkAn3k/AIVa7POu5MRbk9fQROS8Psu2
> =B3yV
> -----END PGP SIGNATURE-----
> --
> 389 users mailing list
> 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users