Tuesday, March 14, 2023

[389-users] Re: Migration from OpenLDAP to 389 Directory Server Failed


On 3/13/23 10:08 PM, Kresna Satya wrote:

Hi everyone, currently I would like to move the LDAP tool from OpenLDAP and 389 Directory Server. The data and configuration are saved in OpenLDAP and I would like to migrate to 389 Directory Server. So far, migration runs well but after migration I cannot see the data in 389 Directory Server.

In regards to step 19 did you run dsidm as root(sudo)?  Otherwise it would not pick up your ".dsrc" settings, which explains why it's not seeing your basedn setting.  You could always

add "-b dc=example,dc=com" to dsidm.  You don't need .dsrc, but it makes things a lot easier.

Also since you are not using "cn=directory manager" in your .dsrc. you need to make sure this "cn=admin" account has access control instructions (aci) that gives it access to the database:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/html/administration_guide/managing_access_control

HTH,

Mark

My environment server:

Here's my GitHub repo to reproduce the migration steps from OpenLDAP to 389 Directory Server: https://github.com/kresnasatya/migrate-openldap-to-389-ds-failed

I also follow the YouTube tutorial from this video presented by William Brown https://www.youtube.com/watch?v=qrbtWOXOhtA. Unfortunately, it doesn't work after the migration step. Could you please guide me how to solve the problem? Thank you.


_______________________________________________  389-users mailing list -- 389-users@lists.fedoraproject.org  To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org  Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/  List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines  List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org  Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue  
--   Directory Server Development Team

No comments:

Post a Comment