Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

LDIF User Import does not work

Status
Not open for further replies.

xrated

IS-IT--Management
May 26, 2001
30
0
0
US
i have an ldif file like this:

version: 1

dn: cn=xxx,ou=USER,ou=HQ,ou=DE,o=AMWAY
changetype: add
mail: xxx
uid: xxx
givenName: xxx
fullName: xxx
Language: ENGLISH
sn: xxx
securityEquals: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx
passwordRequired: TRUE
passwordMinimumLength: 5
passwordAllowChange: TRUE
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: Person
objectClass: ndsLoginProperties
objectClass: Top
ndsHomeDirectory: cn=CL1_USR01,ou=CLUSTER,ou=HQ,ou=DE,o=xxx#0#\xxx
groupMembership: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx
description: xxx
cn: xxx
userPasword: UFVDMDEwNDE=

tried to import it via:

ice.exe - S LDIF -f d:\users.ldif -v D LDAP -s xxx -p 636 -d cn=xxx,ou=adm,o=amway -w xxx -v

but it gives me an error message:

adding entry: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx
Attribute 'userPasword' is not allowed.
Record: 1, Schema Validation failed, skipping dn: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx
ProcessEntry failed: 80 continuing with the next entry
Record: 1, process_ldif_rec failed: 80, dn: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx


Total entries processed: 1
Total number of errors: 1
End time: Tuesday, December 28, 2004
Total Time: 0:00:01.151
Time per entry: 00:01.151
 
i assume the "userPasword" is just a typo or is this in your script

is should be ss
 
man ! thanks!!

i didn´t saw it because its not my script

i hope i can manage that the group memberships will work as you have to update also the group object

its all in a excel file and will be converted with a macro to ldif file, i can provide it if somebody wants it
 
somebody has ever modified existing groups?

doesnt work like this

dn: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx
changetype: add
equivalentToMe: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx
objectClass: groupOfNames
objectClass: Top
member: cn=xxx,ou=USER,ou=HQ,ou=DE,o=xxx

are there any other changetypes?
 
I've used all the MS command line tools and all take time to learn. If you simply want to import user on mass try it very cheap ($15 I think) and it works. I seem to recall there is no free trial period so you can't use it once, but I bought it and it worked.
 
Sorry I came through from a search relating to Active Directory...doh! Did use NetWare 4,5,6 in previous job. Personally I find Windows/Active Directory easier to manage and administer. Hard to say wether it performs better than NDS as hardware (servers and network) have got faster. I have noticed Active Directory seems to have ripped of many of the features of NDS, some worse, some better. Must stop rambling on, wife calling.
 
You only use changetype: add when the attribute you want to modify does not have a value in it. To modify the value of an attribute, you use the changetype: modify

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case [hippy]
Senior Network Engineer
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top