I’m very new to openldap but extremely well versed in the linux/unix environment. I’m trying to setup my very first test openldap environment using the guide here. I’ve also read most of the admin guide here and I have to admit, it is a lot to take in.
So following the ubuntu basic setup guide I created an ldif file that looks like this:
dn: ou=People,dc=example,dc=com objectClass: organizationalUnit ou: People dn: ou=Groups,dc=example,dc=com objectClass: organizationalUnit ou: Groups dn: cn=engineers,ou=Groups,dc=example,dc=com objectClass: posixGroup cn: engineers gidNumber: 5000 dn: uid=john,ou=People,dc=example,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount uid: john sn: Doe givenName: John cn: John Doe displayName: John Doe uidNumber: 10000 gidNumber: 5000 userPassword: johnldap gecos: John Doe loginShell: /bin/bash homeDirectory: /home/john
Whenever I tried to add it using:
$ ldapadd -x -D cn=admin,dc=example,dc=com -W -f add_content.ldif
I get the following error:
adding new entry "cn=engineers,ou=Groups,dc=my-domain,dc=com" ldap_add: Invalid syntax (21) additional info: objectClass: value #0 invalid per syntax adding new entry "uid=john,ou=People,dc=my-domain,dc=com" ldap_add: Invalid syntax (21) additional info: objectClass: value #0 invalid per syntax
The results in google for this error don’t net any helpful suggestions. What could I be doing wrong here?
Your problem is undoubtedly that you need to load the
nis schema into your LDAP server. How to do this depends on whether your are using the legacy
slapd.conf configuration file or the newer dynamic configuration hosted in
cn=config and backed by a
You will need to
include the schema definition in your
slapd.conf by adding a line along the lines of:
This assumes that the
nis.schema file is located at that path; if not, modify the path appropriately.
You will need to restart
slapd to activate the new schema.
(I'm including this for completeness, although it's not directly relevant to your current configfuration).
To load a schema into
slapd if you're using the dynamic
cn=config configuration, you would use
ldapadd. Depending on how your ACLs are configured, the command might look like this:
ldapadd -Y EXTERNAL -H ldapi:// -f /usr/local/etc/openldap/schema/nis.ldif
This assumes that your running
slapd has an ACL permitting "peer credentials" authentication to
root. If that doesn't work, you would need to provide an appropriate bind DN and password using
There is no restart required in this case.
Correct answer by larsks on October 20, 2020
I had the same problem, but the final error was due to the blank or tab spaces I had left trailing rows within the ldif format file I created. As soon as I removed those, the Organization Units were added without problems.
Answered by dcubaz on October 20, 2020
I fix it deleting the
file.ldif that i want to charge in openldap (for example:
data.ldif) because the text editor
vi sometimes insert invisible character by error or bug and this affect to your ldif file. So delete it and you create another one and try to upload each statement one by one and check with the command
ldapsearch -x -h nameofyourserver -b “dc=whateveris,dc=com”, goodbye and i hope to help you with this.
Answered by hansel1 on October 20, 2020
I recently encountered this problem while following the Ubuntu OpenLDAP Server tutorial. Solved it by removing all the trailing whitespace from my rows.
Answered by jamzsabb on October 20, 2020
0 Asked on February 9, 2021 by brettski
1 Asked on February 9, 2021 by andredurao
1 Asked on February 8, 2021 by drew-chapin
1 Asked on February 8, 2021 by t-brian-jones
9 Asked on February 7, 2021 by corey
2 Asked on February 6, 2021 by mealstrom
0 Asked on February 6, 2021 by tyralcori
0 Asked on February 6, 2021 by richard-lian
3 Asked on February 5, 2021 by spirit
1 Asked on February 5, 2021
1 Asked on February 5, 2021 by mangaldeep-dey
1 Asked on February 4, 2021 by ben-voigt
8 Asked on February 4, 2021 by aseba
1 Asked on February 4, 2021 by rabejens
Get help from others!