[389-users] dsidm not work with imported openldap accounts

[Alberto Crescente]

Hello, I would like to migrate my old openldap server to 389-ds (CentOS 
8). I tried to upload the old users from the openldap server into 
389-ds, but if I then try to use the dsidm command I get the following 
error message: "Error: No object exists given the filter criteria ... " 
# john, people, example.com dn: uid=john,ou=people,dc=example,dc=com 
objectClass: top objectClass: person objectClass: posixAccount 
objectClass: shadowAccount uid: john cn: John uidNumber: 5000 gidNumber: 
5000 homeDirectory: /home/john shadowLastChange: 18170 loginShell: 
/bin/bash gecos: John Brown shadowExpire: 24444 sn: Brown Is it a schema 
problem? Does dsidm only work with accounts that have the schema of DS 
1.4? In 389-ds there is an openldap_to_ds migration script, but it seems 
to me that it keeps the same schema for the account after migration, at 
this point it is better to recreate all the accounts with the new DS 1.4 
schema starting from the openldap data?
# john, people, example.com dn: uid=john,ou=people,dc=example,dc=com 
objectClass: top objectClass: nsPerson objectClass: nsAccount 
objectClass: nsOrgPerson objectClass: posixAccount objectClass: 
shadowAccount uid: john cn: John Brown uidNumber: 5000 gidNumber: 5000 
homeDirectory: /home/john shadowLastChange: 18170 loginShell: /bin/bash 
displayName: John Brown shadowExpire: 24444 Best regards, Alberto 
Crescente.
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure