[389-users] Re: Migration from OpenLDAP to 389 DS

Hi, thank you very much for your help, but I still have problems :(
I add schema to 99user.ldif:

dn: cn=schema
objectClass: top
objectClass: ldapSubentry
objectClass: subschema
cn: schema
aci: (target="ldap:///cn=schema")(targetattr !="aci")(version 3.0;acl "anonymo
us, no acis"; allow (read, search, compare) userdn = "ldap:///anyone";)
aci: (targetattr="*")(version 3.0; acl "Configuration Administrators Group"; a
llow (all) groupdn="ldap:///cn=Configuration Administrators,ou=Groups,ou=Topo
logyManagement,o=NetscapeRoot";)
aci: (targetattr="*")(version 3.0; acl "Configuration Administrator"; allow (a
ll) userdn="ldap:///uid=admin,ou=Administrators,ou=TopologyManagement,o=Netsc
apeRoot";)
aci: (targetattr = "*")(version 3.0; acl "SIE Group"; allow (all) groupdn = "l
dap:///cn=slapd-blegos,cn=389 Directory Server,cn=Server Group,cn=blegos.csi.
iskratel.mak,ou=csi.iskratel.mak,o=NetscapeRoot";)
modifiersName: cn=directory manager
modifyTimestamp: 20170526075714Z
numSubordinates: 1

dn: cn=itnetmanager,cn=schema
objectClass: top
objectClass: ldapSubentry
objectClass: subschema
cn: itnetmanager
creatorsName: cn=directory manager
modifiersName: cn=directory manager
createTimestamp: 20170613072328Z
modifyTimestamp: 20170613072328Z

dn: cn=itnetmanager, cn=schema
objectclass: top
objectclass: ldapSubentry
objectclass: subschema
objectClasses: ( 1.3.6.1.4.1.1332.1000.30.1 NAME 'itPrepaidPinSub' DESC 'IskratelprepaidPinSub' MUST ( itPrepaidPin $ itDirectoryNumber ) )
objectClasses: ( 1.3.6.1.4.1.1332.1000.30.2 NAME 'itPrepaidCgPNSub' DESC 'IskratelprepaidCgPNSub' MUST ( itCgPN $ itDirectoryNumber ) )
...

and I do not have any errors when I resrart dirsrv:
[13/Jun/2017:12:42:45.703352975 +0200] slapd shutting down - signaling operation threads - op stack size 0 max work q size 0 max work q stack size 0
[13/Jun/2017:12:42:45.725145416 +0200] slapd shutting down - closing down internal subsystems and plugins
[13/Jun/2017:12:42:45.760637613 +0200] Waiting for 4 database threads to stop
[13/Jun/2017:12:42:46.080192896 +0200] All database threads now stopped
[13/Jun/2017:12:42:46.107869191 +0200] slapd shutting down - freed 0 work q stack objects - freed 0 op stack objects
[13/Jun/2017:12:42:46.173323031 +0200] slapd stopped.
[13/Jun/2017:12:42:46.397936154 +0200] 389-Directory/1.3.5.10 B2017.102.203 starting up
[13/Jun/2017:12:42:46.552160523 +0200] slapd started. Listening on All Interfaces port 389 for LDAP requests

But when I try to import exported data (from openldap) to 389 DS with 389-console, I get these errors:

Error adding object 'dn: itSnmpProfileId=SNMP_V2C,ou=SnmpProfile,l=Kranj,c=SI'. The error sent by the server was 'Object class violation. unknown object class "itSnmpProfileOC"
Error adding object 'dn: itProductId=ES_KONTRON,ou=Product,l=Kranj,c=SI'. The error sent by the server was 'Object class violation. unknown object class "itProductOC"
...

So it looks like that shema is not picked up (because all this classes I have in 99user.ldif

Second most common error in reject file is:
Error adding object 'dn: itContainerId=1048870,ou=Container,l=Kranj,c=SI'. The error sent by the server was 'Object class violation. unknown object class "labeledURIObject"

Data is:
dn: itContainerId=1048870,ou=Container,l=Kranj,c=SI
itSerialNumber: 10
itParentContainerId: 1048860
itContainerName: 16/10
itRegType: 1
objectClass: itContainerOC
objectClass: labeledURIObject
itConfigurationNeeded: FALSE
itContainerStatus: 0
itContainerType: 2
itContainerId: 1048870
structuralObjectClass: itContainerOC
creatorsName: uid=mnadmin,ou=User,l=Kranj,c=SI
createTimestamp: 20160610065455Z
modifiersName: uid=mnadmin,ou=User,l=Kranj,c=SI
modifyTimestamp: 20160610065455Z

Could you please help me also at this two problems?

Thanks!

Best regards,
Blaz

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org