<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10/24/2014 06:27 AM, Орхан Касумов
wrote:<br>
</div>
<blockquote cite="mid:1414153659.837745408@f356.i.mail.ru"
type="cite">
New task: I want to add an additional schema (radius schema) to
default user object classes.<br>
<br>
I prepared the ldif-file for the schema: <a moz-do-not-send="true"
href="https://cloud.mail.ru/public/40edc9a6c9bb%2Fradiusschema.ldif">https://cloud.mail.ru/public/40edc9a6c9bb%2Fradiusschema.ldif</a> ,<br>
then followed instructions in <a moz-do-not-send="true"
href="https://www.redhat.com/archives/freeipa-users/2014-February/msg00050.html">https://www.redhat.com/archives/freeipa-users/2014-February/msg00050.html</a> <br>
At step #2 of the instructions, ldapmodify command was run;<br>
as I'm using FreeIPA 4.1 in a multi-master replication scenario
with 2 servers,<br>
the command was run on both servers and produced this output on
both:<br>
<br>
modifying entry "cn=schema"<br>
<br>
Then I switched to GUI and added "radiusprofile" objectclass.
After hitting the "Update" button I got the message: <br>
<br>
"IPA Error 4001: NotFound<br>
<br>
objectclass radiusprofile not found"<br>
<br>
Restarting ipactl didn't help.<br>
Command "ldapsearch -Y GSSAPI | grep schema" gives no output
besides informational SASL messages.<br>
</blockquote>
<br>
Are you trying to list the schema over LDAP? Where did you get the
above instructions? They are wrong. Use<br>
<br>
ldapsearch -o ldif-wrap=no -Y GSSAPI -s base -b "cn=schema"
attributeTypes objectClasses<br>
<br>
If you are using an older version of ldapsearch that doesn't support
ldif-wrap, see <a class="moz-txt-link-freetext" href="http://richmegginson.livejournal.com/18726.html">http://richmegginson.livejournal.com/18726.html</a><br>
<br>
<blockquote cite="mid:1414153659.837745408@f356.i.mail.ru"
type="cite">There is a "MUST cn" part in the objectclass
definition in the ldif-file, but even after removing it the
situation doesn't change.<br>
Please help me to understand where is the problem, and is it
generally possible to use radius.schema with FreeIPA?<br>
The original schema was taken from: <a moz-do-not-send="true"
href="http://open.rhx.it/phamm/schema/radius.schema">http://open.rhx.it/phamm/schema/radius.schema</a> <br>
Thanks in advance!<br>
<br>
-- <br>
Орхан Касумов
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>