[IPA] Attribute Linking and Indexing

Endi Sukma Dewata edewata at redhat.com
Mon Oct 19 13:01:40 MDT 2009


Andrew and Matthias,

Thanks for applying the patches. I've run quicktest with the latest revision.
With the default backend & FDS backend, the test completed with 6 failures.
However, there is an OpenLDAP-specific issue.

With OpenLDAP backend the provisioning failed because of invalid DN format
on wellKnownObjects and msDS-HasInstantiatedNCs attributes. If I comment out
those attributes the provisioning will complete but the test will produce a
lot of errors. I checked the OpenLDAP schema generated by the provisioning
tool, these attributes are using octet string syntax. Anybody familiar with
OpenLDAP? Thanks!

These are the offending entries:

dn: DC=SAMBA,DC=EXAMPLE,DC=COM
replace: wellKnownObjects
wellKnownObjects: B:32:6227f0af1fc2410d8e3bb10615bb5b0f:CN=NTDS Quotas,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:f4be92a4c777485e878e9421d53087db:CN=Microsoft,CN=Program Data,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:09460c08ae1e4a4ea0f64aee7daa1e5a:CN=Program Data,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:22b70c67d56e4efb91e9300fca3dc1aa:CN=ForeignSecurityPrincipals,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:18e2ea80684f11d2b9aa00c04f79f805:CN=Deleted Objects,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:2fbac1870ade11d297c400c04fd8d5cd:CN=Infrastructure,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:ab8153b7768811d1aded00c04fd8d5cd:CN=LostAndFound,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:ab1d30f3768811d1aded00c04fd8d5cd:CN=System,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:a361b2ffffd211d1aa4b00c04fd7d83a:OU=Domain Controllers,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:aa312825768811d1aded00c04fd8d5cd:CN=Computers,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:a9d1ca15768811d1aded00c04fd8d5cd:CN=Users,DC=SAMBA,DC=EXAMPLE,DC=COM

dn: CN=Configuration,DC=SAMBA,DC=EXAMPLE,DC=COM
replace: wellKnownObjects
wellKnownObjects: B:32:6227f0af1fc2410d8e3bb10615bb5b0f:CN=NTDS Quotas,CN=Configuration,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:ab8153b7768811d1aded00c04fd8d5cd:CN=LostAndFoundConfig,CN=Configuration,DC=SAMBA,DC=EXAMPLE,DC=COM
wellKnownObjects: B:32:18e2ea80684f11d2b9aa00c04f79f805:CN=Deleted Objects,CN=Configuration,DC=SAMBA,DC=EXAMPLE,DC=COM

dn: CN=NTDS Settings,CN=LOCALDC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=SAMBA,DC=EXAMPLE,DC=COM
msDS-HasInstantiatedNCs: B:8:0000000D:CN=Configuration,DC=SAMBA,DC=EXAMPLE,DC=COM
msDS-HasInstantiatedNCs: B:8:0000000D:CN=Schema,CN=Configuration,DC=SAMBA,DC=EXAMPLE,DC=COM
msDS-HasInstantiatedNCs: B:8:00000005:DC=SAMBA,DC=EXAMPLE,DC=COM

--
Endi S. Dewata


More information about the samba-technical mailing list