I'm trying to run an LDAP server on a openSUSE 12. But I have a couple of doubts.What I whant is this: testing.com with 2 OU (Info and People ). So the right way would be ou=Info,dc=testing,dc=com.I use this http://www.padl.com/OSS/MigrationTools.html to generate a ldif file named user user_ldap.ldif, with a few users (this is an example =D). After I edit the migrate_common.ph I create the user_lda.ldif file ~ # cat user_ldap.ldif dn: uid=inxs,ou=People,dc=testing,dc=comuid: inxscn: INXSobjectClass: accountobjectClass: posixAccountobjectClass: topobjectClass: shadowAccountuserPassword: {crypt}$1$yQbmUggV$fNUvBGuOXru0DHQjtlu9h1shadowLastChange: 15392shadowMax: 99999shadowWarning: 7loginShell: /bin/bashuidNumber: 1001gidNumber: 100homeDirectory: /home/inxsgecos: INXSdn: uid=nofx,ou=People,dc=testing,dc=comuid: nofxcn: NOFXobjectClass: accountobjectClass: posixAccountobjectClass: topobjectClass: shadowAccountuserPassword: {crypt}$1$vxU/f4tt$LRHuHhLgPhqcGVA2yLUKk/shadowLastChange: 15392shadowMax: 99999shadowWarning: 7loginShell: /bin/bashuidNumber: 1002gidNumber: 100homeDirectory: /home/nofxgecos: NOFXSo I try to do this::~ # ldapadd -f user_ldap.ldif SASL/DIGEST-MD5 authentication startedPlease enter your password: ldap_sasl_interactive_bind_s: Invalid credentials (49)        additional info: SASL(-13): user not found: no secret in databaseWhen I installed the ldap-server, I created the dn=root with his password, so I asumed that is the password that this asking.I do not create the directory tree I was told that was created automatically from the ldapadd. Or it's false?I have a lot to learn, but need a guide or a small synthesis.
LDAP on openSUSE
opensuse;authentication;ldap
If you want insert this records to the ldap, you must use this command:ldapadd -D 'whole dn of root' -f user_ldap.ldiffor example:ldapadd -D 'cn=root,dc=testing,dc=com' -f user_ldap.ldifThen you will be asking for password, which you set for LDAP root dn. But please: I don't know, which is your root dn, use your own.EDIT: You have to add basic entries:dn: dc=testing,dc=comobjectClass: topobjectClass: dcObjectobjectClass: organizationo: testing.com organizationdc: testingstructuralObjectClass: organizationdn: ou=People,dc=testing,dc=comobjectClass: organizationalUnitou: Peopleou: People of testing.com organizationstructuralObjectClass: organizationalUnitNote: When will ldapadd complain, try to remove both structuralObjectClass lines.For explaining: LDAP want to have defined whole path from 'root' (which is your organization dc=testing,dc=com) to the leafs, which are in this case some users on ou=People 'branch'. If you would like to have in LDAP machines and they will have ou=Machines 'organizational unit', you must add to the LDAP directory 'branch' ou=Machines (like ou=People, but only substitute word 'People' with word 'Machines' in my sample) and then you can add 'leafs' - entries for machines.