[389-users] Re: Referential Integrity and moving subtree to another parent fails

2019-02-20 Thread William Brown
Sorry, this formatted, poorly. Find attached, # --- BEGIN COPYRIGHT BLOCK --- # Copyright (C) 2019 William Brown # All rights reserved. # # License: GPL (version 3 or any later version). # See LICENSE for details. # --- END COPYRIGHT BLOCK --- # from lib389._constants import DEFAULT_SUFFIX

[389-users] Re: Referential Integrity and moving subtree to another parent fails

2019-02-20 Thread William Brown
> On 21 Feb 2019, at 13:12, William Brown wrote: > > > >> On 21 Feb 2019, at 08:57, Olivier JUDITH wrote: >> >> Hi, >> >> I'm moving many ou to one level up >> ou=SITE1,ou=BU,ou=Account,dc=... >> ou=SITE2,ou=BU,ou=Account,dc=... >> to >> ou=SITE1,ou=Account,dc=.. >>

[389-users] Re: Referential Integrity and moving subtree to another parent fails

2019-02-20 Thread William Brown
> On 21 Feb 2019, at 08:57, Olivier JUDITH wrote: > > Hi, > > I'm moving many ou to one level up > ou=SITE1,ou=BU,ou=Account,dc=... > ou=SITE2,ou=BU,ou=Account,dc=... > to > ou=SITE1,ou=Account,dc=.. > ou=SITE2,ou=Account,dc=... > > Don't want OU=BU anymore. > >

[389-users] Re: Referential Integrity and moving subtree to another parent fails

2019-02-20 Thread Olivier JUDITH
Hi, I'm moving many ou to one level up ou=SITE1,ou=BU,ou=Account,dc=... ou=SITE2,ou=BU,ou=Account,dc=... to ou=SITE1,ou=Account,dc=.. ou=SITE2,ou=Account,dc=... Don't want OU=BU anymore. ou=SITE1,ou=Account,dc=... has less than 100 entries it works fine ou=SITE2,ou=Account,dc=... has more

[389-users] Re: Referential Integrity and moving subtree to another parent fails

2019-02-20 Thread William Brown
We would need to test this scenario, but it could very likely be a bug in the server. To be sure the conditions you have here are: ou=start,dc=… ou=destination,dc=… In ou=start you have 800+ entries. Then you are doing a modrdn of ou=start to ou=start,ou=destination,dc=…, and the error

[389-users] Referential Integrity and moving subtree to another parent fails

2019-02-20 Thread Olivier JUDITH
Hi, I have activated Referential Integrity plugin on my instance in order to move several OU to a new parent subtree. Also to update automatically uniqueMember attribute defined in group member . It works fine with few user entries under some OU but fails when the OU contains more than 400

[389-users] Re: Replicate 389DS with another LDAP server

2019-02-20 Thread Howard Chu
> Date: Wed, 20 Feb 2019 15:35:46 +0100 > From: Ludwig Krispenz > On 02/20/2019 03:24 PM, Howard Chu wrote: >> > Mark Reynolds wrote: >>> >> On 2/20/19 5:59 AM, Howard Chu wrote: > Date: Tue, 19 Feb 2019 13:50:11 +0100 > From: wodel youchi > > Hi, >

[389-users] Re: 389-DS on CentOS 6.10

2019-02-20 Thread Steve Kuervers
You are correct that a CA is included in IdM. But many organizations design their root CA as an independent device, often kept offline for security. The IdM CA is then configured as a Sub-CA, responsible for its own security domain. The benefit here is that the root CA can also provide

[389-users] Re: Replicate 389DS with another LDAP server

2019-02-20 Thread Ludwig Krispenz
On 02/20/2019 03:24 PM, Howard Chu wrote: Mark Reynolds wrote: On 2/20/19 5:59 AM, Howard Chu wrote: Date: Tue, 19 Feb 2019 13:50:11 +0100 From: wodel youchi Hi, is it possible to create a replication matser/master or master/slave between 389DS and another LDAP server openldap for example?

[389-users] Re: Replicate 389DS with another LDAP server

2019-02-20 Thread Howard Chu
Mark Reynolds wrote: > > On 2/20/19 5:59 AM, Howard Chu wrote: >>> Date: Tue, 19 Feb 2019 13:50:11 +0100 >>> From: wodel youchi >>> >>> Hi, >>> >>> is it possible to create a replication matser/master or master/slave >>> between 389DS and another LDAP server openldap for example? >>> >>>

[389-users] Re: Replicate 389DS with another LDAP server

2019-02-20 Thread Mark Reynolds
On 2/20/19 5:59 AM, Howard Chu wrote: Date: Tue, 19 Feb 2019 13:50:11 +0100 From: wodel youchi Hi, is it possible to create a replication matser/master or master/slave between 389DS and another LDAP server openldap for example? Regards. Maybe. OpenLDAP has recently added support for

[389-users] Re: Replicate 389DS with another LDAP server

2019-02-20 Thread Howard Chu
> Date: Tue, 19 Feb 2019 13:50:11 +0100 > From: wodel youchi > > Hi, > > is it possible to create a replication matser/master or master/slave > between 389DS and another LDAP server openldap for example? > > Regards. Maybe. OpenLDAP has recently added support for replication using a retro