Re: [Cpu-users] CPU problems after a fresh ldap migration

[Blake M. <bma...@pu...>]

Well, by default, the cpu.conf file shouldn't work for anyone :-) After all,
your DIT is very much installation specific. In any case, most of the time
issues have to do with a bad configuration, although occasionally (Paul would
probably say frequently) it is a valid bug. In this case I would agree, check
your config and let us know!
Also, cpu has the ability to take users (and maybe groups as well) and import
them from your existing flatfiles to your LDAP directory. Just thought people
might want to know that. Good luck.

-Blake

Whatchu talkin' 'bout, Willis?
> > I used the migrate_all_offline.sh from the padl.com migration tools
> > package to import my existing accounts into the ldap directory. slapd
> > was not running while the migrate script ran.
> > 
> > I installed cpu-1.3.100 from source.
> > 
> > When I run 'cpu cat' it outputs the user accounts, but seems to choke
> > trying to list groups:
> > 
> > User Accounts
> > root:x:0:0:root:/root:/bin/bash
> > bin:x:1:1:bin:/bin:/sbin/nologin
> > daemon:x:2:2:daemon:/sbin:/sbin/nologin
> > adm:x:3:4:adm:/var/adm:/sbin/nologin
> > <tons of users snipped>
> > somelocaluser:x:517:517::/home/somelocaluser:/bin/bash
> > ldap: ldapCat: ldap_search_st: No such object
> >         matched DN: "dc=mydomain,dc=com"
> > ldap: CPU_init: Error in ldapOperation.
> Check your cpu.conf, the padl scripts put the groups into
> ou=Group,dc=mydomain,dc=com
> whereas cpu by default looks at ou=Groups,dc=mydomain,dc=com
> > 
> > There's a similar error when trying to add a new account:
> > 
> > # cpu useradd test
> > 
> > ldap: getNextGid: ldap_search_st: No such object
> >         matched DN: "dc=mydomain,dc=com"
> > ldap: CPU_init: Error in ldapOperation.
> > 
> > Domain names have been changed to protect the ignorant. :-)
> > 
> > Any clues?
> > 
> > -- 
> > Kevin Murphy

--
Blake Matheny           "... one of the main causes of the fall of the
bma...@pu...      Roman Empire was that, lacking zero, they had
http://www.mkfifo.net    no way to indicate successful termination of
http://ovmj.org/GNUnet/  their C programs." --Robert Firth