Wednesday, February 19, 2014

Re: [389-users] Setting up sub-suffix on 1.2.11.15-31 (CentOS 6.5)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rich,

Thanks again for your help. Now that I have created the sub
suffices, I figured out that I also needed to create the databases. I
did this by adding the following.

dn: cn=SNS,cn=ldbm database,cn=plugins,cn=config
changetype: add
objectclass: extensibleObject
objectclass: nsBackendInstance
nsslapd-suffix: dc=sns,dc=ias,dc=edu

dn: cn=MATH,cn=ldbm database,cn=plugins,cn=config
changetype: add
objectclass: extensibleObject
objectclass: nsBackendInstance
nsslapd-suffix: dc=math,dc=ias,dc=edu

dn: cn=ITG,cn=ldbm database,cn=plugins,cn=config
changetype: add
objectclass: extensibleObject
objectclass: nsBackendInstance
nsslapd-suffix: dc=itg,dc=ias,dc=edu

dn: cn=NET,cn=ldbm database,cn=plugins,cn=config
changetype: add
objectclass: extensibleObject
objectclass: nsBackendInstance
nsslapd-suffix: dc=net,dc=ias,dc=edu

Now the databases are showing up in /var/lib/dirsrv/slapd-ldap*/db.

Now I will tackle replication for these new DC's.

Thanks,
ep

On 02/19/2014 02:52 PM, Brian Epstein wrote:
> Ah, I think I see the error of my ways. I blind copied the
> "nsslapd-backend: GroupData" from the webpage, not realizing that
> this was the name of the database for the sub suffix.
>
> I'll try it again and give a unique database for each dc I add.
>
> Thanks, ep
>
> On 02/19/2014 02:38 PM, Brian Epstein wrote:
>> Rich and 389-users,
>
>> I followed the directions on the page you had sent,
>> https://access.redhat.com/site/documentation/en-US/Red_Hat_Directory_Server/9.0/html/Administration_Guide/Configuring_Directory_Databases.html#Creating_and_Maintaining_Suffixes-Creating_Suffixes
>
>> I was encouraged when I did the first ldapmodify, which seemed
>> to work well. The second add didn't work, though and gave me a
>> cryptic answer. The error log gave me a bit more explanation.
>
>> [19/Feb/2014:13:26:13 -0500] - ERROR: backend GroupData is
>> already pointed to by a mapping tree node. Only one mapping tree
>> node can point to a backend
>
>> Since then, I haven't been able to add my other sub suffix dc's.
>
>> Any idea what could be going on? I have a feeling I'm looking at
>> this incorrectly.
>
>> Thanks, Brian
>
>> [root@ldap3 slapd-ldap3]# ldapmodify -x -a -h localhost -p 389 -D
>> "cn=directory manager" -W Enter LDAP Password: dn:
>> cn=dc=math\,dc=ias\,dc=edu,cn=mapping tree,cn=config changetype:
>> add objectclass: top objectclass: extensibleObject objectclass:
>> nsMappingTree nsslapd-state: backend nsslapd-backend: GroupData
>> nsslapd-parent-suffix: dc=ias,dc=edu cn: dc=math,dc=ias,dc=edu
>
>> adding new entry "cn=dc=math\,dc=ias\,dc=edu,cn=mapping
>> tree,cn=config"
>
>> dn: cn=dc=sns\,dc=ias\,dc=edu,cn=mapping tree,cn=config
>> changetype: add objectclass: top objectclass: extensibleObject
>> objectclass: nsMappingTree nsslapd-state: backend
>> nsslapd-backend: GroupData nsslapd-parent-suffix: dc=ias,dc=edu
>> cn: dc=sns,dc=ias,dc=edu
>
>> adding new entry "cn=dc=sns\,dc=ias\,dc=edu,cn=mapping
>> tree,cn=config" ldap_add: Server is unwilling to perform (53)
>
>
>
>
>> -- 389 users mailing list 389-users@lists.fedoraproject.org
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
> -- 389 users mailing list 389-users@lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>

- --
Brian Epstein <bepstein@ias.edu> +1 609-734-8179
Manager, Network and Security Institute for Advanced Study
Key fingerprint = 128A 38F4 4CFA 5EDB 99CE 4734 6117 4C25 0371 C12A
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlMFLrcACgkQYRdMJQNxwSrZXQCfSwKPuoB7uA4g7J7iszjVs7mw
d18An21Fspe0mQy1zvYSKe+wsxivmn/M
=4xdL
-----END PGP SIGNATURE-----
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users

No comments:

Post a Comment