Ldifwrite created file used in ldapadd/ldapmodify gives errors

Question

We want to backup entries in the Users container.
1. The ldif file created by ldifwrite:
ldifwrite -c oidtwo -b "cn=Users,dc=dn,dc=dev,dc=pg,dc=gov" -f backup.ldif
2. ldapadd -p 389 -h localhost -D "cn=orcladmin" -w oiddp -f backup.ldif
3. Got errors in orcloci ...in VI we found that the orcloci entries are not formatted properly, and we fixed this manually.
4. We got another error:
adding new entry cn=orcladmin, cn=Users, dc=dn,dc=dev,dc=pg,dc=gov
ldap_add: DSA is unwilling to perform
ldap_add: additional info: You cannot add entries containing authpasswords.
Just wonder if this is the right way to back up this container?
Thanks!

Answer 1

You'll need to remove authpassword attributes as those are created at create time. Its mentioned in one of the steps of moving to a new server (Metalink Note:276688.1). The XSL they used is below:
<!--
File : del_authpassword.xsl
Version : 1.0
Author : mgueury
Description:
Remove the authpassword from the DSML files
-->
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<xml:output method="xml"/>
<xsl:template match="*|@*|node()">
<xsl:copy>
<xsl:apply-templates select="*|@*|node()"/>
</xsl:copy>
</xsl:template>
<xsl:template match="attr">
<xsl:choose>
<xsl:when test="@name='authpassword;oid'">
</xsl:when>
<xsl:when test="@name='authpassword;orclcommonpwd'">
</xsl:when>
<xsl:otherwise>
<xsl:copy>
<xsl:apply-templates select="*|@*|node()"/>
</xsl:copy>
</xsl:otherwise>
</xsl:choose>
</xsl:template>
</xsl:stylesheet>
You'll want to start with dumping it to XML:
ldapsearch -h $OID_HOSTNAME -p $OID_PORT -X -D "cn=orcladmin" -w $IAS_PASSWORD -b "cn=users,dc=dev_domain,dc=com" -s sub "objectclass=inetorgperson" > portal_users.xml
Then run that against the XSL to remove the attribute:
xml -f -s del_authpassword.xsl -o portal_users.xml portal_users_new.xml