[389-users] Re: ldapsearch and 389ds

On 06/03/2016 07:12 PM, Job Cacka wrote:
> Hmmm, I don't have a result, and I of course overwrote it not really expecting it to work. Six months ago I was playing with a CSV file in a perl script for another project that was encoded differently and that is what originally made me think of it. After looking through the saved output files I created in the troubleshooting process none of them have that attribute listed.
>
> I do have it in my nightly backup. I run a script at midnight that runs db2bak.pl, so the data is in there, but I don't want to restore a bad backup to a live, production system.
>
> This output has the same problem.
> dn: cn=Domain Guests,ou=GROUPS,dc=domain,dc=com
> gidNumber: 514
> sambaSID: S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx-514
> sambaGroupType: 2
> displayName: Domain Guests
> objectClass: posixGroup
> objectClass: sambaGroupMapping
> objectClass: top
> description: Netbios Domain Guests Users
> cn: Domain Guests
Just to confirm, you are saying the search below will not return the entry?

ldapsearch -Hldaps://ds1.domain.com -D "cn=directory manager" -w "pass" -xLLL -b "dc=domain,dc=com" gidnumber=514

>
> I sent it to a file, opened it in a hex editor, but there is no difference that I can see. Are there any hex editors built into red hat 6.4 where I could open it without moving the data to a different server?
Do you have a gidNumber index?

Can you please post this output:

grep -i gidnumber /etc/dirsrv/slapd-INSTANCE/dse.ldif

ls -l /var/lib/dirsrv/slapd-INSTANCE/db/userRoot

Thanks,
Mark
>
> Thanks again,
> Job
> --
> 389-users mailing list
> 389-users@lists.fedoraproject.org
> https://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org
--
389-users mailing list
389-users@lists.fedoraproject.org
https://lists.fedoraproject.org/admin/lists/389-users@lists.fedoraproject.org