[Samba] Samba 3.0.9 ==> 3.0.14a migration LDIF problem

[Craig White]

On Thu, 2005-12-01 at 15:52 -0500, Collins, Kevin wrote:
> I'm trying to migrate my existing RedHat ES Samba PDC to Ubuntu.  The RedHat version of Samba is 3.0.9 and the Ubuntu version is 3.0.14a.  Everything was going fine until I tried to import the LDIF of the existing LDAP directory.  The LDIF actually imports all of the structure (OU and Group definitions) and all of my users, but it fails when it comes to my first machine account with this error:
> 
> ==============================================================================
> slapadd: dn="uid=magellan$,ou=Computers,dc=nesbitt,dc=local" (line=1437): (65) no structural object class provided ==============================================================================
> 
> I'm certain that is caused by the differing version of OpenLDAP that I'm running, but for the life of me, I can't find a solution.  Here is an example of one of my machine accounts:
> 
> ==============================================================================
> dn: uid=magellan$,ou=Computers,dc=nesbitt,dc=local
> uidNumber: 1040
> gidNumber: 553
> homeDirectory: /dev/null
> loginShell: /bin/false
> objectClass: top
> objectClass: posixAccount
> objectClass: sambaSamAccount
> uid: magellan$
> displayName: MAGELLAN$
> cn: MAGELLAN$
> description: Computer
> sambaSID: S-1-5-21-3325760187-3909277049-4208064797-3080
> sambaPrimaryGroupSID: S-1-5-21-3325760187-3909277049-4208064797-2107
> sambaAcctFlags: [W          ]
> sambaLogonTime: 0
> sambaLogoffTime: 0
> sambaKickoffTime: 0
> sambaPwdMustChange: 2147483647
> sambaPwdCanChange: 1121708732
> sambaNTPassword: 763BF0E6707F001EFC3A10BC2BCAA57C
> sambaPwdLastSet: 1121708732
> modifiersName: cn=Manager,dc=nesbitt,dc=local
> modifyTimestamp: 20050718174532Z
> ==============================================================================
> 
> Can someone give me a pointer as to what I'm doing wrong?
----
just guessing that your RHEL was RHEL 3.0 with ldap-2.07-whatever and
there wasn't any schema checking which allowed you to get away with some
sloppy errors.

On my schema, posixAccount would require
cn, uid, uidNumber, gidNumber and homeDirectory (all of which are in the
above) but I would guess that you have an account that lacks one of
those attributes.

Best to check your 'nis.schema' for the 'musts' and then verify that all
your accounts have the 'musts' attributes because one of them is
probably missing. Generally, I get a report from slapadd that tells me
which line # - which would likely be the end of the record where it
tripped.

Craig