How can I add an admin user in Oracle Unified Directory (OUD) 11g r2?

Question

I'm using OUD 11G R2. I just installed OUD with the default setting and setup an instance.  I tried to add an admin user with the command:
    ./ldapmodify -h localhost -p 1389 -D "cn=Directory Manager" -w password --defaultAdd --filename admin.ldif
Here is the content of admin.ldif
    dn: cn=oimuser,cn=Root DNs,cn=config
    objectClass: inetOrgPerson
    objectClass: person
    objectClass: top
    objectClass: ds-cfg-root-dn-user
    objectClass: organizationalPerson
    userPassword: Oracle123
    cn: oimuser
    sn: oimuser
    ds-cfg-alternate-bind-dn: cn=oimuser
    givenName: OIM User
    ds-privilege-name: -config-read
    ds-privilege-name: -config-write
    ds-privilege-name: -backend-backup
    ds-privilege-name: -backend-restore
    ds-privilege-name: -data-sync
    ds-privilege-name: -disconnect-client
    ds-privilege-name: -jmx-notify
    ds-privilege-name: -jmx-read
    ds-privilege-name: -jmx-write
    ds-privilege-name: -ldif-export
    ds-privilege-name: -ldif-import
    ds-privilege-name: -modify-acl
    ds-privilege-name: -privilege-change
    ds-privilege-name: -proxied-auth
    ds-privilege-name: -server-restart
    ds-privilege-name: -server-shutdown
    ds-privilege-name: -update-schema
    ds-privilege-name: -cancel-request
I got the error as below:
The provided entry cn=oimuser,cn=Root DNs,cn=config cannot be added because its suffix is not registered with the network group network-group
Would you please advise how I can fix that? Thanks

Answer 1

I got the reason. cn=config is an administrative suffix.
In general, direct LDAP access to the administrative suffixes (using
the ldap* utilities) is discouraged. In most cases, it is preferable
to use the dedicated administrative command-line utilities to access
these suffixes.
If you must use the ldap* commands to access the administrative
suffixes, you must use the administration connector port (with the
--useSSL or -Z option).
It works when I use the command:
    ./ldapmodify -h localhost -p 4444 -D "cn=Directory Manager" -w Oracle123 --defaultAdd -Z --filename admin.ldif
You can verify it by:
    ./ldapsearch -h localhost -p 4444 -D "cn=Directory Manager" -w password --useSSL -b "cn=root DNs,cn=config" "cn=oimuser"