[Fedora-directory-users] nisDomain/Solaris schema not loading???

[Jim Hogan]

I am running FDS 1.02 in master/client setup on Centos 4.4.  With 
respect to an earlier query about an EMC NAS and Solaris client config, 
I am running into a more basic problem with one of the two schema from 
the Solaris How-To 
(http://directory.fedora.redhat.com/wiki/Howto:SolarisClient), (I named 
these 62DUAConfigProfile.ldif and 63nisDomain.ldif because I already had 
a Samba schema on 61).

I was easily able to load the provided 62DUAConfigProfile schema file 
(and I created a profile object for the EMC client that relied on 
attributes in that schema).  I can see those new DUA attributes like 
profileTTL.

However, When I attempted to add the 63nisDomain.ldif schema, I can 
restart the FDS slapd without error, but the nis* attributes do not then 
show up in the FDS directory schema no matter how I look (try to add 
attribute in phpLDAPadmin, or via FDS console under config-->schema or 
elsewhere).  I have a 2 server master/client setup and have added the 
schema files on both and restarted slapd on both several times

There are a few other nis* attributes visible (nismap, nisnetgroup, 
nisobject) but none of these seem to duplicate what are provided by 
63nisDomain.ldif.

This config file appeared elsewhere on line and I tried it from 2 
sources but it looked to be identical.  I was able to make the slapd 
fail on restart by adding an unwanted space/CR to the file, so it seems 
like slapd is definitely trying to read it.  I have verified that the 
LDIF on both FDS servers is identical.  I turned logging up to 64 on 
slapd to get config processing errors, but it didn't yield much:

config - Unknown attribute mod will be ignored
[21/Mar/2007:10:21:28 -0700] - Fedora-Directory/1.0.2 B2006.060.1928 
starting up
[21/Mar/2007:10:21:28 -0700] - Unknown config attribute readonly
[21/Mar/2007:10:21:28 -0700] - DNS ldap.example.com -> DN 
dc=ldap,dc=example,dc=com
[21/Mar/2007:10:21:28 -0700] - slapd started.  Listening on All 
Interfaces port 389 for LDAP requests
[21/Mar/2007:10:21:29 -0700] - Listening on All Interfaces port 636 for 
LDAPS requests

Not sure what those unknowns are, but I removed the nisDomain.ldif from 
config/schema and restarted; the error log output was unchanged.

In case there was some unknown precedence issue, I changed the order of 
the 2 new LDIF to make nisDomain first, 62.  I then moved it ahead of 
Samba schema to "59".  No change.

The LDIF I am using now is pasted below -- a one-attribute-per-line format.

I am at a bit of a stand on this.  I am *really* not understanding why I 
can't find any of these attributes.  But, it feels like one of those 
times (they come about 10 times a year) where somebody may hit Jim with 
a very large clue stick -- like I am really missing something :(

Any insight appreciated.

Jim

Current 63NisDomain.ldif:

dn: cn=schema
attributeTypes: ( 1.3.6.1.1.1.1.28 NAME 'nisPublickey' DESC 
'nisPublickey' EQUALITY caseIgnoreIA5Match SYNTAX 
1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.1.1.1.29 NAME 'nisSecretkey' DESC 
'nisSecretkey' EQUALITY caseIgnoreIA5Match SYNTAX 
1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.1.1.1.12 SUP name NAME 'nisDomain' DESC 
'NIS domain' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 2.16.840.1.113730.3.1.30 NAME 'mgrpRFC822MailMember' 
DESC 'mgrpRFC822MailMember' EQUALITY caseIgnoreIA5Match SYNTAX 
1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.1.1.12 NAME 'nisNetIdUser' DESC 
'nisNetIdUser' EQUALITY caseExactIA5Match SYNTAX 
1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.1.1.13 NAME 'nisNetIdGroup' DESC 
'nisNetIdGroup' EQUALITY caseExactIA5Match SYNTAX 
1.3.6.1.4.1.1466.115.121.1.26 )
attributeTypes: ( 1.3.6.1.4.1.42.2.27.1.1.14 NAME 'nisNetIdHost' DESC 
'nisNetIdHost' EQUALITY caseExactIA5Match SYNTAX 
1.3.6.1.4.1.1466.115.121.1.26 )
objectClasses: ( 1.3.6.1.1.1.2.14 NAME 'NisKeyObject' DESC 
'NisKeyObject' SUP top MUST ( cn $ nisPublickey $ nisSecretkey ) MAY ( 
uidNumber $ description ) )
objectClasses: ( 1.3.1.6.1.1.1.2.15 NAME 'nisDomainObject' DESC 
'nisDomainObject' SUP top AUXILIARY MUST ( nisDomain ) )
objectClasses: ( 2.16.840.1.113730.3.2.4 NAME 'mailGroup' DESC 
'mailGroup' SUP top MUST ( mail ) MAY ( cn $ mgrpRFC822MailMember ) )
objectClasses: ( 1.3.6.1.4.1.42.2.27.1.2.6 NAME 'nisNetId' DESC 
'nisNetId' SUP top MUST ( cn ) MAY ( nisNetIdUser $ nisNetIdGroup $ 
nisNetIdHost ) )