[Freeipa-users] FreeIPA and Samba4

[Alexander Bokovoy]

On Fri, 30 Oct 2015, Troels Hansen wrote:
>
>> This means the task has finished already.
>>
>> You can run a new one to see if it reports something detailed about the
>> DNs it couldn't process.
>>
>
>
>Hmm, this is weird:
>
>I have created a task:
>10-task-sidgen-run.update
>
>containing:
>
>dn: cn=$TIME-$FQDN-$LIBARCH,cn=ipa-sidgen-task,cn=tasks,cn=config
>add:objectclass:top,extensibleObject
>add:cn:$TIME-$FQDN-$LIBARCH
>add:basedn:"cn=accounts,$SUFFIX"
>add:ttl:3600
>add:delay:0
I think it should be 
add:nsslapd-basedn: cn=accounts,$SUFFIX
not 
add:basedn:"cn=accounts,$SUFFIX"

this is what sidgen task expects and it returns constraint violation
error if parameters are wrong:

    str = fetch_attr(e, "nsslapd-basedn", NULL);
    if (str == NULL) {
        LOG_FATAL("Missing nsslapd-basedn!\n");
        *returncode = LDAP_CONSTRAINT_VIOLATION;
        ret = SLAPI_DSE_CALLBACK_ERROR;
        goto done;
    }


-- 
/ Alexander Bokovoy