Hi folks

I attempted to transfer my (little) LDAP data from ApacheDS 1.0.2. to Apache 1.5.5
(using Studio 1.4.0)

Well, I was not really successful ...

What I did is, I exported the system and our partition from 1.0.2 (including the operation attributes
as we use ACI) to separate LDIF files ...

I removed everything from the system.ldif that was not "custom" to not interfere with objects
in the new version (and did also not allow to overwrite anything ...)
This one went in like a charm ....

Now, I imported our partition, but there, some errors are reported (we only have approx. 80
entries for now, some failed).

After some further investigation, this was related to the fact, that there were some dependencies like the OU should exist where the object should go. But in the LDIF, the OU was created later than the object itself ... okey, not that dramatic I thought and I should re-run the import
later again, which should work out ...

But I have other issues, that I could not explain ...

In the import log, for example, I get this:

#!RESULT OK
#!CONNECTION ldap://10.255.100.16:389
#!DATE 2009-10-20T17:01:14.568
dn: ou=DDT,ou=Customers,dc=netsuccess,dc=ch
objectClass: organizationalUnit
objectClass: top
ou: DDT
accessControlSubentries: 2.5.4.3=se_ldap_customer_limited_read_access,0.9.23
42.19200300.100.1.25=netsuccess,0.9.2342.19200300.100.1.25=ch
accessControlSubentries: 2.5.4.3=se_ldap_full_administrators,0.9.2342.192003
00.100.1.25=netsuccess,0.9.2342.19200300.100.1.25=ch
createTimestamp: 20091019143703Z
creatorsName: 2.5.4.3=mzu_adm,2.5.4.11=users,2.5.4.11=system


But I cannot see this OU under customer!
I also get an error in the Studio like:

Attempt to lookup non-existant entry: 2.5.4.3=se_ldap_customer_limited_read_access,0.9.2342.19200300.100.1.25=netsuccess,0.9.2342.19200300.100.1.25=ch]

Why some of the OU's are displayed and some not.
From those I can see, they have also the subentry defined ?!

I can also not see the Subentries in the top level of the partition, as it was defined before ... I couldn't find their definition in the exportet LDIF either (well, maybe I didn't search for the right stuff, as I'm not that an expert ...)

For now, I did not yet enable access control on the new apacheDS, so this should not cause any issue, I hope ...

So if someone has any experience or hints, they are highly welcome

Thank you very much

Beat








Reply via email to