[389-users] DNA not working?

Rob Crittenden rcritten at redhat.com
Tue May 19 13:24:08 UTC 2009


Dmitry Amirov wrote:
> Hello.
> 
> I have a problem with DNA plugin.
> I have installed it in according with documentation and have done:
> 1)
> dn: cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config
> changetype: modify
> replace: nsslapd-pluginEnabled
> nsslapd-pluginEnabled: on
> 
> 2)
> dn: cn=Account UIDs,cn=Distributed Numeric Assignment
> Plugin,cn=plugins,cn=config
> objectClass: top
> objectClass: extensibleObject
> cn: Account UIDs
> dnatype: uidNumber
> dnafilter: (objectclass=posixAccount)
> dnascope: ou=People, dc=aqua
> dnanextvalue: 1
> dnaMaxValue: 1300
> dnasharedcfgdn: cn=Account UIDs,ou=Ranges,dc=aqua
> dnathreshold: 100
> dnaRangeRequestTimeout: 60
> dnaMagicRegen: magic
> 
> After that server has been restarted and i tryed to add new posixAccount
> entry.
> dn: uid=jsmith, ou=people,dc=aqua
> objectClass: top
> objectClass: person
> objectClass: posixAccount
> uid: jsmith
> cn: John Smith
> sn: Smith
> homeDirectory: /home/smith
> gidNumber: 123
> 
> So, DNA not working with error:
> adding new entry uid=jsmith, ou=people,dc=aqua
> ldap_add: Object class violation
> ldap_add: additional info: missing attribute "uidNumber" required by
> object class "posixAccount"
> 
> Please help with DNA. It's very important for me. Now i am using clean
> openldap+smbldap-tools, but i want to migrate to FDS.
> 
> Thanks a lot.

What version of 389/FDS is this?

My working config looks like:

dn: cn=Posix Accounts,cn=Distributed Numeric Assignment 
Plugin,cn=plugins,cn=config
objectclass: top
objectclass: extensibleObject
cn: Posix Accounts
dnaType: uidNumber
dnaNextValue: 1100
dnaInterval: 1
dnaMaxValue: 10000
dnaMagicRegen: 999
dnaFilter: (objectclass=posixAccount)
dnaScope: dc=example,dc=com

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20090519/0c4892a8/attachment.bin>


More information about the Fedora-directory-users mailing list