Importing LDIF file In DSEE 11.1.1.7.0

Hi All,
I was trying to import Example.ldif file but some how its giving this error. What is the reason :-
C:\sun-dsee7\dsee7\bin> dsconf import -h localhost -p 1389 C:\sun-dsee7\dsee7\resources\ldif\Example.ldif dc=example,dc=com
Enter "cn=Directory Manager" password:
Unable to bind securely on "localhost:1389".
The "import" operation failed on "localhost:1389".
C:\sun-dsee7\dsee7\bin>dsadm start C:\SUN
Directory Server instance 'C:/SUN' is already running (pid: 2700)

Hi Ranjeet,
the error you get seems to be due to the fact that the dsconf command is trying to bind 'securely' to a 'clear' port; try with the following command using the -e option:
C:\sun-dsee7\dsee7\bin> dsconf import -h localhost -p 1389 -e C:\sun-dsee7\dsee7\resources\ldif\Example.ldif dc=example,dc=com
It should work.
For further reference, please check the dsconf --help, or the official product documentation manual page:
http://docs.oracle.com/cd/E29127_01/doc.111170/e28967/dsconf-1m.htm#dsconf-1m
HTH,
Marco

Similar Messages

Cannot import ldif file

Hi,
I'm exporting a .ldif file from sun ds 5.2 to importing it to sun ds 6.3. I have to make some changes in the .ldif file after exporting it.
in 5.2, dc=example,dc=com
in 6.3 dc=misc,dc=example,dc=com (adding dc=misc. can this be correct)
The following is the code. could you tell me what additions I have to make before importing it.
Also, is there any error in the following commands
./dsconf create-suffix -h localhost -p 8389 dc=misc,dc=example,dc=com
./dsconf import -h localhost -p 8389 /export/home/user/Example.ldif dc=misc,dc=example,dc=com
Example.ldif file is the exported file.
dn: dc=misc,dc=example,dc=com
dc: example
objectClass: top
objectClass: domain
dn: ou=abc,dc=misc,dc=example,dc=com
objectClass: top
objectClass: organizationalUnit
ou: abc
dn: cn=abc_users,dc=misc,dc=example,dc=com
objectClass: top
objectClass: groupOfUniqueNames
cn: abc_users
description: abc Users at example
uniqueMember: uid=abc_user,ou=abc,dc=misc,dc=example,dc=com
dn: uid=abc_user,ou=abc,dc=misc,dc=example,dc=com
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
givenName: abc-user
sn: client
cn: abc-user client
uid: abc_user
userPassword: {SSHA}lksd;koqoqpowk&iqdnl

I exported ldif through softerra LDAP administrator. How do I export to ldif in sun ds 5.2 from the command line.
These are the commands I have used to import ldif file.
creating suffix, already created suffix, and overwritung it.
./dsconf create-suffix -h 1192.169.2.100 -p 8389 dc=misc,dc=example,dc=com
Enter "cn=Directory Manager" password:
"dc=misc,dc=example,dc=com": suffix already exists.
The "create-suffix" operation failed on "192.169.2.100:8389".
./dsconf import -h 192.169.2.100 -p 8389 /export/home/user/example.ldif dc=misc,dc=example,dc=com
Enter "cn=Directory Manager" password:
New data will override existing data of the suffix "dc=misc,dc=example,dc=com".
Initialization will have to be performed on replicated suffixes.
Do you want to continue [y/n] ? y
## Index buffering enabled with bucket size 40
## Beginning import job...
## Processing file "/export/home/user/example.ldif"
## WARNING: skipping entry "dc=misc,dc=example,dc=com" which violates schema, ending line 5 of file "/export/home/user/example.ldif"
## Finished scanning file "/export/home/user/example.ldif" (3 entries)
## WARNING: Skipping entry "ou=abc,dc=misc,dc=example,dc=com" which has no parent, ending at line 10 of file "/export/home/user/example.ldif"
## WARNING: Skipping entry "cn=abc_users,dc=misc,dc=example,dc=com" which has no parent, ending at line 17 of file "/export/home/user/example.ldif"
## WARNING: Skipping entry "uid=abc_user,ou=abc,dc=misc,dc=example,dc=com" which has no parent, ending at line 27 of file "/export/home/user/example.ldif"
## Workers finished; cleaning up...
## Workers cleaned up.
## Cleaning up producer thread...
## Indexing complete.
## Starting numsubordinates attribute generation. This may take a while, please wait for further activity reports.
## Numsubordinates attribute generation complete. Flushing caches...
## Closing files...## Import complete. Processed 3 entries (4 were skipped) in 3 seconds. (1.00 entries/sec)
Can I export from sun ds 5.2 and import to sun ds 6.3 using commands
how do I do that
Please help me
thanks,
Charan

Anyone tried using LDIF file in the User Profile Synchronization Process?

Microsoft pushied an article recently talking about using LDIF file in the SharePoint's user profile synchronization.
Configure profile synchronization using a Lightweight Directory Interchange Format (LDIF) file (SharePoint Server 2010) http://technet.microsoft.com/en-us/library/ff959234.aspx
Currently I am unable to obtain the required "Replicate Directory Change" permission set up by the AD admin. So I thought of exploring this alternative since I still have AD search permission right now.
So far, I was able to set up the MOSSLDAP-LDIFMA, and use an import.ldif file to add, remove and update user profiles. However, there are some problems that I can't resolve. One of key problems is, the LDIF-imported records can't be
sync'd with login-based records.
In my environment, when a user login SharePoint via Windows authentication, a new profile would be added, under the account name "domain\username". Meanwhile, when an LDIF record imported, there will be another profile created under the account
name "domain:domain\username", or "domain:username". That is, there would be two profiles for each user.
Based on my understanding, it is very likely the user profile synchronization is based on the user's account name. But in document and sample files provided, I can't find out any clue how to prepare the ldif file so that it will update the
matching records, instead of creating new ones.
Any help? Thanks in advance.

Has anyone managed to get this to work?
It's nice that Microsoft offers the ability to import user profiles via LDIF into SharePoint, but it is useless if the account name is not correct after the import. I have tried multiple imports from the LDIF to get a user account to show up as "domain\username" but
it always ends up as "domain:domain\username", or "domain:username". or a variation
of these 2 with a colon separating the domain form the username. i see that multiple people have had the same problem, but unfortunetaly can't seem to find a solution. Also I see Bradley mentions that he was able to import accounts using get-QADUser,
but he doesnt mention what the accounts import as or if it resolved the domain colon issue.
Thanks in advance for any help or information anyone can provide.
cheers,
Zed

Unable to import pab ldif file. Insufficient Access

I am in the process of upgrading from iMS 5.2 w/iDS 4.16 on an NT box to iMS 5.2 w/iDS 5.1 on Solaris 9.
And , yes I am new to solaris, but that is another story.....
I have successfully installed solaris, iDS 5.2, run the ims_dssetup.pl script, installed iMS 5.2 servers, and gotten everyting to work. I have successfully imported my users by using .ldif files. My problem is that when I try to import the pab entries from an ldif file, all the entries get rejected with the error "Insufficient Access".
I should add that I am doing this on a SunFire V210 with no video card, mouse or keyboard. In other words through the mgmt port and using a windows workstation to access the administration and directory servers.
I'm at wits end.... do I go left or right?
Thanks in advance..

I am logging into the administration server from my windows workstation as admin (administration server user) and i believe this to be the same user as the configuration directory user admin. I am opening the server group and opening the directory server window. I then go to the configuration tab and click on Console > Import database. I then select the file on my local windows workstation(choosing one on the server seems to not be an option) and click ok.
it then procedes to reject the entries.
I did try to do an ldapadd -d DirectoryManager -w password -f filename.ldif from the ldap server instance directory, but got basically the same results..
What am I doing wrong?

DS6 dse.ldif file keeps getting deleted

I am running Directory Server 6.3 on Solaris 10 U7. Last night I applied various system patches - none of them appear to the related to ldap or the directory server. Some times when I shutdown some thing seems to crash and the system does system dump. When I restart directory fails to start. The log shows
Configuration error The default password storage scheme SSHA could not be read
or was not found in the file /opt/ldap/slapd-server1/config/dse.ldif. It is mandatory.
the dse.ldif file is blank. Fortunately the dse.ldif.startOK is OK. It looks like it had been created or modified during a clean shutdown yesterday evening.
Any thoughts?
thanks

HI
I have about 5 GB free on the rpool volume (i.e. /, /opt etc.)
During the patching process (along with trying to get a tape drive working) I rebooted aout 3-4 times. At least twice, it looked like something panicked/crashed/dumped. My guess is that the directory server deleted the existing dse.ldif file, there was a system error, then directory server could not write the new file. it seems odd that at least twice that the crash occured immediately after the file was deleted. Would directory server crash if it can't write files? Server shutdown might take 5 min while various services are closed.
When I stop the ds-myinstance svc with "svcadm" (without rebooting) it looks like it does update dse.ldif (at least time time stamp) , and creates and dse.ldif.bak file. On restarting the service cleanly, the dse.ldif.StartOK file is updated. So it looks like directory server itself is OK but either can't write files because of some other, system-related shutdown issue..
What I may need to try is stopping directory server then shutting down the system and seeing if I get panic/coredumps/file syncs.
Thanks

How do I add an objectclass to existing LDAP server entry using an ldif file?

I am trying to fix an LDAP server that has been operating with schema check off. I need to add an objectclass to the groups so that some attributes that have been added to the groups will be "legal." From the documentation, the changetype: modify will allow the changing/adding of attributes that are already a part of the schema objects that define the entry. It does not look like I can add an objectclass with the modify operation.
If this is the case, then how do I add an objectclass to an existing entry? Using the GUI is not possible since the directory server in question is not being managed with an admin server. Please tell me that I do not have to delete the groups and import them again with an LDIF file that has the new objectclass added.
Kent

See this post:
http://softwareforum.sun.com/servlet/ProcessRequest?RHIVEID=181&RPAGEID=135&HOID=50B500000008000000636B0000&USEARCHCONTEXT_CATEGORY_0=_21_%24_7_&USEARCHCONTEXT_CATEGORY_S=0&UCATEGORY_0=_21_%24_7_&UCATEGORY_S=0

Can't import LDIF format exported mail address to Address Book

New to iMac and trying full migration from PC
I have a LDIF format address file (exported from Comcast's Webmail in Netscape Communicatore LDIF format). Can't import the file to my new iMAC's Address Book.
Getting the following msg: No Cards Added. No importable cards were found.
It is a small file, there are records in the file- I opened the file with MS Notepad. I have opend the file with TextEdit as well and see the records in the file. Records have givenname:, sn:, mail:. xmozillanickname:, description:.
I've checked the FAQ, all support pages and there doesn't seem to be a solution.
Is this ture?
iMAc Mac OS X (10.4.7)

I found a solution.
When I tried importing the mailboxes, I was selecting "Files in mbox format," because that's what they are, right? No. Apparently, I needed to select "Apple Mail" instead.
That imports everything under an Import folder, and then I can select the emails and drag them to the appropriate inboxes (after re-setting up the accounts).
Ugh, this is not easy. But I'm getting close.
(Oh, step 6 will be to clear off Time Capsule and start a new backup. But only after I'm convinced things are running right. Obviously, I will be looking at other options for catastrophic backup in the future.)
Another note: I first tried copying my entire user folder to my external drive. But after a few minutes of copying, that failed, saying that I didn't have permission to copy one or more files. It didn't tell me what it was, or ask whether to skip it. It just failed. So that's why I was left to selectively pick files.
Another lesson learned: Know your Time Capsule password. If you rely on Keychain for this, and your machine dies, you're going to have a hard time recovering (if it's possible).

Mav Contacts does not import csv file

Trying to import my Outlook exchange contacts to Mavericks Contacts. Exported from outlook to excel. Saved excel file to csv format. Tried to import csv file to Mavericks Contacts: Error message says the csv file is not compatible. Also imported the csv file to Numbers and saved again as another csv file. Same error message. Suggestions?

The following was copied from the Contacts Help.
Import contact information saved or exported from other apps. The files can be in LDAP Interchange Format (LDIF) or text format (tab-delimited or comma-separated value (CSV)).
If you’re importing a tab-delimited or CSV file, make sure it’s formatted correctly using a text editor such as TextEdit.
Remove any line breaks within a contact’s information.
Make sure that fields in a tab-delimited file are separated by a tab, instead of by another character. Don’t include spaces before or after tabs.
Make sure that fields in a CSV file are separated by a comma, instead of by another character. Don’t include spaces before or after commas.
Make sure all addresses have the same number of fields. Add empty fields as needed.
In Contacts, choose File > Import, select the file, change the encoding if necessary, then click Open.
If you’re importing a text file, review the field labels.
If the first card contains headers, make sure the headers are correctly labeled or marked “Do not import.” Any changes you make to this card are made to all cards in the file. To not import the headers card, select “Ignore first card.”
To change a label, click the arrows next to the label and choose a new label. If you don’t want to import a field, choose “Do not import.”

Import ldif warning of no parent

Hi,
I'm newbie of Oracle directory server. When trying to import the ldif file to the oracle directory server 11.1.1.7.0 using the command:
$ dsconf create-suffix -h localhost -p 4000 dc=hyperion,dc=com
$ dsconf import -h localhost -p 4000 <path>/10000users.ldif dc=hyperion,dc=com
It generate messages as:
New data will overide existing data of the suffix"dc=hyperion, dc=com"
Initialization will have to be performed on replicated suffixes
And lots of warning as:
skipping entry "uid=user0000,ou=People,dc=hyperion, dc=com" which has no parent, ending at line xxx of file '10000users.ldif'
The 1000users.ldif is as:
dn: uid=user0000, ou=People, dc=hyperion, dc=com
uid: user0000
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
cn: User 0000
userPassword: password
givenName: User
sn: 0000
dn: uid=user0001, ou=People, dc=hyperion, dc=com
uid: user0001
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
cn: User 0001
userPassword: password
givenName: User
sn: 0001
dn: uid=user9999, ou=People, dc=hyperion, dc=com
uid: user9999
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetorgperson
cn: User 9999
userPassword: password
givenName: User
sn: 9999
Did I miss any steps or the LDIF file I got has some missings?
Thanks!

Hi,
I have created the 'top' entry for the suffix using the command:
$ dsconf create-suffix -h localhost -p 4000 dc=hyperion,dc=com
I also create teh subsuffix using the command:
$ dsconf create-suffix -h localhost -p 4000 ou=People,dc=hyperion,dc=com
$ dsconf set-suffix-prop -h localhost -p 4000 ou=People,dc=hyperion,dc=com parent-suffix-dn:dc=hyperion,dc=com
before running import:
$ dsconf import -h localhost -p 4000 <path>/10000users.ldif dc=hyperion,dc=com
But it still not import the 10000user data:
"Import complete. Processed 10000 entries (10000 entries were skipped because they don't belong to this database) in 175 seconds"
Thanks!

I need to extend the schema for iPlanet Dir. 5.0 and add custom objectclasses and atributes. I do this by adding entries in the 99user.ldif file. Its not working. Any ideas?

Hi
I need to extend the schema for iPlanet Dir. 5.0 and I do not want to do so from the console. As per the documentation, I need to either add entries in the 99user.ldif file or define my own custom [00-99]myname.ldif file. I tried this but its not working.
I have made the assumption that there is no explicit import step for the 'user defined' schema files (as it is for user data ldif files). I assume that on start (or on opening the console), I'd be able to see the new schema after the server has read the schema file.
I have verified that entering new objectclasses and attributes from the console adds entries into the 99user.ldif file. So why is the reverse process not working. Can anybody throw some light on this? Also in case my assumptions are faulty, please let me know.
I did not change the aci entries in the existing ldif file. Is any modification needed there? I was logged in as the Directory Manager during this testing process.
regards
Sikka ([email protected])

Hi Sikka,
The server reads its schema configuration on startup. If you manually modify the schema files while the server is running, it will not have any effect. You have to restart the server.
The console adds the new schema elements over LDAP (you could do that as well, you only have to modify the cn=schema entry), so the server is aware of the changes immediately and thus restarting is not needed.
I hope this helps.
Bertold

Import Ldif to AD

I´m a new guy in this tecnology, but i want to learn everything about OIM.
I need to provisioning my OIM with AD, but i don´t know about AD. How can i import the content in my ldif file to AD? Can you help me?
and
Where can i find documentations about this resources in AD.

The AD utility to import LDIF configurations is ldifde
-Kevin

How can i separate the ldif file.

Hi,!!
I have a some question.
I was backup db use "db2ldif"
but ldif file size is so big..(about 1.8GB)
So i can't import the file because take a long time.
I want to get the separated ldif file when i use "db2ldif" ,
How can i do.???

1) Why is 1.8 GB too big? Solaris 8 has large file support.
2) Did you use ldif2db to import the file? How long did it take?
3) How do you want it separated? By file size?
Please correct me if I'm wrong, but it sounds like you want to be able to do db2ldif -SIZE, which would create many LDIF files with a maximum size of SIZE. Then you want to be able to import them all e.g.
cat ldif1 ldif2 ... ldifN | ldif2db -s mysuffix -i -
This would "solve" problem 1) (although it shouldn't be a problem). But this would not solve problem 2) because it would still take just as long.
I'm not sure what your real problem is, if any.

Problem encountered when installing ldif file

I have installed SunOne Directory Server 5.1 on windows 2000 server.
then, when I try to install one ldif file using ldif2db.bat , it always give wrong command format message.
D:\Program Files\Sun\MPS\slapd-tcsch166-server>ldif2db.bat -i lifeSIT.ldif
"Usage: ldif2db -n backend_instance | {-s "includesuffix"}* {-i ldif-file}* [-O]
[{-x "excludesuffix"}*] [-Y keydb-pwd] [-y keydb-pwd-file]"
can anybody advise on this?
Or, u can directly mail me by [email protected]

First you should install the latest version of the server i.e. 5.2 P4.
In the commmand you also need to specify the suffix or the backend database so at minimal the command should be
ldif2db.bat -n backend_instance -i lifeSIT.ldif
Now by default the backend database is called "userroot" so the command becomes
ldif2db.bat -n userroot -i lifeSIT.ldif
Alternatively you can specify the suffix instead of the backend
ldif2db.bat -s "dc=example,dc=com" -i lifeSIT.ldif
I would also suggest that you read the documenation to fimiliarize yourself with the import process (this link is for 5.2)
http://docs.sun.com/source/817-7613/backup.html#wp19541
Regards,
-Wajih
-Wajih

How to add new password policy to cn=config via LDIF file

I am trying to add a new password policy called "Service Password Policy". I have the following LDIF file:
dn: cn=Sservice Password Policy,cn=config
changetype: add
objectClass: top
objectClass: passwordPolicy
cn: Service Password Policy
description: A password policy intended for proxy or service accounts.
passwordMustChange: off
passwordChange: off
passwordMinAge: 0
passwordInHistory: 0
passwordExp: off
passwordMaxAge: 2142720000
passwordWarning: 0
passwordExpireWithoutWarning: off
passwordCheckSyntax: off
passwordMinLength: 6
passwordRootdnMayBypassModsChecks: off
passwordStorageScheme: ssha
passwordLockout: off
passwordMaxFailure: 32700
passwordUnlock: on
I've tried various permutations of this command:
dsconf import -h localhost -p 1389 /root/createServicePasswordPolicy.ldif "cn=Service Password Policy,cn=config"
I get this error:
"cn=config": suffix does not exist.
The "import" operation failed on "localhost:1389".
Thx for any help,
CC

Good it did not work or you would have overwritten all the data currently in cn=config. Anyway, "dsconf import" only works on regular backends. The cn=config tree is special a.
You should use ldapmodify to add the contents to cn=config.
$ ldapmodify -p 1389 -D cn=root -f a.ldif -a

Trouble importing ldif to new 5.2 server

Got a dump of directory from 5.1 server. installed 5.2 on anew box. Tried importing ldif during install and after install. I can see it process the 130mb file, but can't sense any records are in place..
Importing from console gives loads of errors "error loading object 'dn: o=us.com object not found
Other times I got similar error sayng object already exists.
I do uninstall_dirserver and rm -Tf * from the target dir each time
I'm over 10 install/uninstall so far
It feels like something wrong with my base dn, but I'm not sure how to fix it
This is for a new install from 5.1 to 5.2 on RedHat ES 3
Thanks
Jeb

Got a dump of directory from 5.1 server. installed 5.2 on anew box. Tried importing ldif during install and after install. I can see it process the 130mb file, but can't sense any records are in place..
Importing from console gives loads of errors "error loading object 'dn: o=us.com object not found
Other times I got similar error sayng object already exists.
I do uninstall_dirserver and rm -Tf * from the target dir each time
I'm over 10 install/uninstall so far
It feels like something wrong with my base dn, but I'm not sure how to fix it
This is for a new install from 5.1 to 5.2 on RedHat ES 3
Thanks
Jeb

Importing LDIF file In DSEE 11.1.1.7.0

Similar Messages

Maybe you are looking for