On 13 Apr 2021, at 23:38, Jan Tomasek jan@tomasek.cz wrote:

Hi,

I need to import sub-suffix into the existing suffix on a running server. When I use:

dsconf -D "cn=Directory Manager" -w "$pswd" ldap://localhost backend import userRoot sub-suffix.ldif

than userRoot is truncated and later import fails with error:

[13/Apr/2021:15:08:41.180921374 +0200] - WARN - import_foreman - import userRoot: Skipping entry "o=sub,o=suffix" which has no parent, ending at line 36 of file "/root/sub-suffix.ldif"

One way is to dump existing userRoot and later re-import complete backend:

dsconf -D "cn=Directory Manager" -w "$pswd" ldap://localhost backend import userRoot suffix.ldif sub-suffix.ldif

But that means downtime I'm trying to avoid.

Without code changes, I think this is going to involve downtime.

A possible way to handle this is if you have multiple replicas, you can do the import on a single replica offline, join it to the topology, and the re-init the data over your other machines.

Sorry :(

Other import way is use ldapadd but that means that server replaces operational attributes: creatorsName modifiersName createTimestamp modifyTimestamp

Is there a way how to import sub-suffix into existing and running server and preserve those operational attributes at the same time?

Thanks

---

Jan Tomasek aka Semik http://www.tomasek.cz/ _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.... Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

— Sincerely,

William Brown

Senior Software Engineer, 389 Directory Server SUSE Labs, Australia