OpenLdap - restore backup - slapcat/slapadd
Clash Royale CLAN TAG#URR8PPP
Im using slapcat to make backup like this:
slapcat -n 1 > $BACKUP_PATH/ldap.domain.com.ldif
Then import using slapadd:
slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif
I can't restore my backup this way because of the operational attributes.
I have errors for example:
structuralObjectClass: no user modification allowed
It's possible to make a backup without operational attributes or import somehow with them?
backup ldap openldap
add a comment |
Im using slapcat to make backup like this:
slapcat -n 1 > $BACKUP_PATH/ldap.domain.com.ldif
Then import using slapadd:
slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif
I can't restore my backup this way because of the operational attributes.
I have errors for example:
structuralObjectClass: no user modification allowed
It's possible to make a backup without operational attributes or import somehow with them?
backup ldap openldap
add a comment |
Im using slapcat to make backup like this:
slapcat -n 1 > $BACKUP_PATH/ldap.domain.com.ldif
Then import using slapadd:
slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif
I can't restore my backup this way because of the operational attributes.
I have errors for example:
structuralObjectClass: no user modification allowed
It's possible to make a backup without operational attributes or import somehow with them?
backup ldap openldap
Im using slapcat to make backup like this:
slapcat -n 1 > $BACKUP_PATH/ldap.domain.com.ldif
Then import using slapadd:
slapadd -F /etc/ldap/slapd.d -n 1 -l ldap.domain.com.ldif
I can't restore my backup this way because of the operational attributes.
I have errors for example:
structuralObjectClass: no user modification allowed
It's possible to make a backup without operational attributes or import somehow with them?
backup ldap openldap
backup ldap openldap
asked Oct 31 '14 at 8:42
s1cs1c
1821210
1821210
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Taken from http://www.openldap.org/lists/openldap-software/200504/msg00195.html
You are not allowed to change these as they are internal.
Either remove them from your LDIF or use the -c
switch (dangerous).
slapadd -F /etc/ldap/slapd.d -n 1 -c -l ldap.domain.com.ldif
As for not writing them in the first place, pipe the output through egrep to trim them:
slapcat -n 1 | egrep -v "^(structuralObjectClass|entryUUID|creatorsName|modifiersName|createTimestamp|modifyTimestamp|entryCSN):" > $BACKUP_PATH/ldap.domain.com.ldif
From http://vaab.blog.kal.fr/2010/03/10/import-export-ldap-database/
I consider this a bug in slapcat
, at the very least, it should have an option to 'not' output this stuff.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f165191%2fopenldap-restore-backup-slapcat-slapadd%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Taken from http://www.openldap.org/lists/openldap-software/200504/msg00195.html
You are not allowed to change these as they are internal.
Either remove them from your LDIF or use the -c
switch (dangerous).
slapadd -F /etc/ldap/slapd.d -n 1 -c -l ldap.domain.com.ldif
As for not writing them in the first place, pipe the output through egrep to trim them:
slapcat -n 1 | egrep -v "^(structuralObjectClass|entryUUID|creatorsName|modifiersName|createTimestamp|modifyTimestamp|entryCSN):" > $BACKUP_PATH/ldap.domain.com.ldif
From http://vaab.blog.kal.fr/2010/03/10/import-export-ldap-database/
I consider this a bug in slapcat
, at the very least, it should have an option to 'not' output this stuff.
add a comment |
Taken from http://www.openldap.org/lists/openldap-software/200504/msg00195.html
You are not allowed to change these as they are internal.
Either remove them from your LDIF or use the -c
switch (dangerous).
slapadd -F /etc/ldap/slapd.d -n 1 -c -l ldap.domain.com.ldif
As for not writing them in the first place, pipe the output through egrep to trim them:
slapcat -n 1 | egrep -v "^(structuralObjectClass|entryUUID|creatorsName|modifiersName|createTimestamp|modifyTimestamp|entryCSN):" > $BACKUP_PATH/ldap.domain.com.ldif
From http://vaab.blog.kal.fr/2010/03/10/import-export-ldap-database/
I consider this a bug in slapcat
, at the very least, it should have an option to 'not' output this stuff.
add a comment |
Taken from http://www.openldap.org/lists/openldap-software/200504/msg00195.html
You are not allowed to change these as they are internal.
Either remove them from your LDIF or use the -c
switch (dangerous).
slapadd -F /etc/ldap/slapd.d -n 1 -c -l ldap.domain.com.ldif
As for not writing them in the first place, pipe the output through egrep to trim them:
slapcat -n 1 | egrep -v "^(structuralObjectClass|entryUUID|creatorsName|modifiersName|createTimestamp|modifyTimestamp|entryCSN):" > $BACKUP_PATH/ldap.domain.com.ldif
From http://vaab.blog.kal.fr/2010/03/10/import-export-ldap-database/
I consider this a bug in slapcat
, at the very least, it should have an option to 'not' output this stuff.
Taken from http://www.openldap.org/lists/openldap-software/200504/msg00195.html
You are not allowed to change these as they are internal.
Either remove them from your LDIF or use the -c
switch (dangerous).
slapadd -F /etc/ldap/slapd.d -n 1 -c -l ldap.domain.com.ldif
As for not writing them in the first place, pipe the output through egrep to trim them:
slapcat -n 1 | egrep -v "^(structuralObjectClass|entryUUID|creatorsName|modifiersName|createTimestamp|modifyTimestamp|entryCSN):" > $BACKUP_PATH/ldap.domain.com.ldif
From http://vaab.blog.kal.fr/2010/03/10/import-export-ldap-database/
I consider this a bug in slapcat
, at the very least, it should have an option to 'not' output this stuff.
edited Oct 26 '17 at 8:28
answered Oct 26 '17 at 8:15
thecarpythecarpy
2,305825
2,305825
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f165191%2fopenldap-restore-backup-slapcat-slapadd%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown