You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by "Cook, Lee (IS) (Contr)" <R....@ngc.com> on 2010/03/23 15:59:42 UTC

Active Directory ldif import fails

Are MS Active Direcotry and ApacheDS schemas incompatible?
Using Apache Dir Studio I tried to import my AD ldif and failed on the very first entry with :
 
#!RESULT ERROR

#!CONNECTION ldap://localhost:10389

#!DATE 2010-03-23T10:40:46.160

#!ERROR [LDAP: error code 32 - NO_SUCH_OBJECT: failed for Add Request : ClientEntry dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local objectClass: top objectClass: organizationalUnit subSchemaSubEntry: CN=Aggregate,CN=Schema,CN=Configuration,DC=triad,DC=local gPLink: [LDAP://cn={E753D915-B2C8-4AA8-AAD2-71AFA59C9FB2},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;2][LDAP://cn={D5F6C9AC-9D8A-49CD-8A5E-ABD4A9EF36CA},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;1] createTimeStamp: 20090326173435.0Z ou: BSTT whenChanged: 20091020152044.0Z gPOptions: 0 instanceType: 4 uSNCreated: 8835 distinguishedName: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local uSNChanged: 8835 whenCreated: 20090326173435.0Z name: BSTT objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=triad,DC=local modifyTimeStamp: 20091020152044.0Z objectGUID: ?? Q1cF? ???? : Cannot find a partition for 2.5.4.11=bstt,2.5.4.11=projects,0.9.2342.19200300.100.1.25=bicc,0.9.2342.19200300.100.1.25=triad,0.9.2342.19200300.100.1.25=local]

dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local


 

Re: Active Directory ldif import fails

Posted by Emmanuel Lecharny <el...@gmail.com>.
On 3/23/10 3:59 PM, Cook, Lee (IS) (Contr) wrote:
> Are MS Active Direcotry and ApacheDS schemas incompatible?
>    
Schemas are different, that does not mean they are incompatible. But 
that will forbid you to import a LDIF you just extracted from AD into ADS.

It's exactly the same for two database : you won't be able to import 
data if you don't have imported the schema first.

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.nextury.com



Re: Active Directory ldif import fails

Posted by Emmanuel Lecharny <el...@gmail.com>.
On 3/23/10 4:05 PM, Hammond, Steven wrote:
> Yes, AD is Microsoft, and ApacheDS is LdapV3 standards based.
>
> And if you find any listing of a way to support the AD schema, let me know.  When I looked 18 months ago, Microsoft actively removes any site that tries to publish the AD schema.
>    
Makes sense as the AD schema may change without any notice !

-- 
Regards,
Cordialement,
Emmanuel Lécharny
www.nextury.com



RE: Active Directory ldif import fails

Posted by "Cook, Lee (IS) (Contr)" <R....@ngc.com>.
thks stefan.  i was able to test my ldap code against the AD server after all.

________________________________

From: Stefan Seelmann [mailto:seelmann@apache.org]
Sent: Tue 3/23/2010 1:05 PM
To: users@directory.apache.org
Subject: Re: Active Directory ldif import fails



Hammond, Steven wrote:
> Yes, AD is Microsoft, and ApacheDS is LdapV3 standards based.
>
> And if you find any listing of a way to support the AD schema, let me know.  When I looked 18 months ago, Microsoft actively removes any site that tries to publish the AD schema.

You can use Studio to extract the AD schema and import it into ApacheDS.
 [1] and section 3.3. of the paper [2] describe the feature.

> #!ERROR [LDAP: error code 32 - NO_SUCH_OBJECT: failed for Add Request : ClientEntry dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local objectClass: top objectClass: organizationalUnit subSchemaSubEntry: CN=Aggregate,CN=Schema,CN=Configuration,DC=triad,DC=local gPLink: [LDAP://cn={E753D915-B2C8-4AA8-AAD2-71AFA59C9FB2},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;2][LDAP://cn={D5F6C9AC-9D8A-49CD-8A5E-ABD4A9EF36CA},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;1] createTimeStamp: 20090326173435.0Z ou: BSTT whenChanged: 20091020152044.0Z gPOptions: 0 instanceType: 4 uSNCreated: 8835 distinguishedName: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local uSNChanged: 8835 whenCreated: 20090326173435.0Z name: BSTT objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=triad,DC=local modifyTimeStamp: 20091020152044.0Z objectGUID: ?? Q1cF? ???? : Cannot find a partition for 2.5.4.11=bstt,2.5.4.11=projects,0.9.2342.19200300.100.1.25=bicc,0.9.2342.19200300.100.1.25=triad,
0.9.2342.19200300.100.1.25=local]
>
> dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local

There much more issues to solve before you can import the data:
- you need to create a partition for that entry
- you need to import the parent entries first
- you need to remove operational attributes

And if all that is done it should be noted that ApacheDS won't behave
like AD.

Kind Regards,
Stefan

[1]http://directory.apache.org/studio/static/users_guide/schema_editor/tasks_merge_schemas.html
[2]http://directory.apache.org/community%26resources/the-apache-directory-project-toolchain-for-developers.html





Re: Active Directory ldif import fails

Posted by Stefan Seelmann <se...@apache.org>.
Hammond, Steven wrote:
> Yes, AD is Microsoft, and ApacheDS is LdapV3 standards based.
> 
> And if you find any listing of a way to support the AD schema, let me know.  When I looked 18 months ago, Microsoft actively removes any site that tries to publish the AD schema.

You can use Studio to extract the AD schema and import it into ApacheDS.
 [1] and section 3.3. of the paper [2] describe the feature.

> #!ERROR [LDAP: error code 32 - NO_SUCH_OBJECT: failed for Add Request : ClientEntry dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local objectClass: top objectClass: organizationalUnit subSchemaSubEntry: CN=Aggregate,CN=Schema,CN=Configuration,DC=triad,DC=local gPLink: [LDAP://cn={E753D915-B2C8-4AA8-AAD2-71AFA59C9FB2},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;2][LDAP://cn={D5F6C9AC-9D8A-49CD-8A5E-ABD4A9EF36CA},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;1] createTimeStamp: 20090326173435.0Z ou: BSTT whenChanged: 20091020152044.0Z gPOptions: 0 instanceType: 4 uSNCreated: 8835 distinguishedName: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local uSNChanged: 8835 whenCreated: 20090326173435.0Z name: BSTT objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=triad,DC=local modifyTimeStamp: 20091020152044.0Z objectGUID: ?? Q1cF? ???? : Cannot find a partition for 2.5.4.11=bstt,2.5.4.11=projects,0.9.2342.19200300.100.1.25=bicc,0.9.2342.19200300.100.1.25=triad,
0.9.2342.19200300.100.1.25=local]
> 
> dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local

There much more issues to solve before you can import the data:
- you need to create a partition for that entry
- you need to import the parent entries first
- you need to remove operational attributes

And if all that is done it should be noted that ApacheDS won't behave
like AD.

Kind Regards,
Stefan

[1]http://directory.apache.org/studio/static/users_guide/schema_editor/tasks_merge_schemas.html
[2]http://directory.apache.org/community%26resources/the-apache-directory-project-toolchain-for-developers.html



RE: Active Directory ldif import fails

Posted by "Hammond, Steven" <St...@Polycom.com>.
Yes, AD is Microsoft, and ApacheDS is LdapV3 standards based.

And if you find any listing of a way to support the AD schema, let me know.  When I looked 18 months ago, Microsoft actively removes any site that tries to publish the AD schema.

-----Original Message-----
From: Cook, Lee (IS) (Contr) [mailto:R.Lee.Cook@ngc.com] 
Sent: Tuesday, March 23, 2010 9:00 AM
To: users@directory.apache.org
Subject: Active Directory ldif import fails

Are MS Active Direcotry and ApacheDS schemas incompatible?
Using Apache Dir Studio I tried to import my AD ldif and failed on the very first entry with :
 
#!RESULT ERROR

#!CONNECTION ldap://localhost:10389

#!DATE 2010-03-23T10:40:46.160

#!ERROR [LDAP: error code 32 - NO_SUCH_OBJECT: failed for Add Request : ClientEntry dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local objectClass: top objectClass: organizationalUnit subSchemaSubEntry: CN=Aggregate,CN=Schema,CN=Configuration,DC=triad,DC=local gPLink: [LDAP://cn={E753D915-B2C8-4AA8-AAD2-71AFA59C9FB2},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;2][LDAP://cn={D5F6C9AC-9D8A-49CD-8A5E-ABD4A9EF36CA},cn=policies,cn=system,DC=bicc,DC=triad,DC=local;1] createTimeStamp: 20090326173435.0Z ou: BSTT whenChanged: 20091020152044.0Z gPOptions: 0 instanceType: 4 uSNCreated: 8835 distinguishedName: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local uSNChanged: 8835 whenCreated: 20090326173435.0Z name: BSTT objectCategory: CN=Organizational-Unit,CN=Schema,CN=Configuration,DC=triad,DC=local modifyTimeStamp: 20091020152044.0Z objectGUID: ?? Q1cF? ???? : Cannot find a partition for 2.5.4.11=bstt,2.5.4.11=projects,0.9.2342.19200300.100.1.25=bicc,0.9.2342.19200300.100.1.25=triad,0.9.2342.19200300.100.1.25=local]

dn: OU=BSTT,OU=Projects,DC=bicc,DC=triad,DC=local