Invalid DN syntax (34)错误

yexin218

刚刚接触LDAP。用的是SUSE10.1自带的LDAP。

源文件：

1. #
   
2. # See slapd.conf(5) for details on configuration options.
   
3. # This file should NOT be world readable.
   
4. #
   
5. include                /etc/openldap/schema/core.schema
   
6. include                /etc/openldap/schema/cosine.schema
   
7. include                /etc/openldap/schema/inetorgperson.schema
   
8. include                /etc/openldap/schema/rfc2307bis.schema
   
9. include                /etc/openldap/schema/yast.schema
   
10. # Define global ACLs to disable default read access.
    
11. 
    
12. # Do not enable referrals until AFTER you have a working directory
    
13. # service AND an understanding of referrals.
    
14. #referral        ldap://root.openldap.org
    
15. 
    
16. pidfile                /var/run/slapd/slapd.pid
    
17. argsfile        /var/run/slapd/slapd.args
    
18. 
    
19. # Load dynamic backend modules:
    
20. modulepath        /usr/lib/openldap/modules
    
21. # moduleload        back_ldap.la
    
22. # moduleload        back_meta.la
    
23. # moduleload        back_monitor.la
    
24. # moduleload        back_perl.la
    
25. 
    
26. # Sample security restrictions
    
27. #        Require integrity protection (prevent hijacking)
    
28. #        Require 112-bit (3DES or better) encryption for updates
    
29. #        Require 63-bit encryption for simple bind
    
30. # security ssf=1 update_ssf=112 simple_bind=64
    
31. 
    
32. # Sample access control policy:
    
33. #       Root DSE: allow anyone to read it
    
34. #       Subschema (sub)entry DSE: allow anyone to read it
    
35. #       Other DSEs:
    
36. #               Allow self write access to user password
    
37. #               Allow anonymous users to authenticate
    
38. #               Allow read access to everything else
    
39. #       Directives needed to implement policy:
    
40. access to dn.base=""
    
41.         by * read
    
42. 
    
43. access to dn.base="cn=Subschema"
    
44.         by * read
    
45. 
    
46. access to attrs=userPassword,userPKCS12
    
47.         by self write
    
48.         by * auth
    
49. 
    
50. access to attrs=shadowLastChange
    
51.         by self write
    
52.         by * read
    
53. 
    
54. access to *
    
55.         by * read
    
56. 
    
57. # if no access controls are present, the default policy
    
58. # allows anyone and everyone to read anything but restricts
    
59. # updates to rootdn.  (e.g., "access to * by * read")
    
60. #
    
61. # rootdn can always read and write EVERYTHING!
    
62. 
    
63. #######################################################################
    
64. # BDB database definitions
    
65. #######################################################################
    
66. 
    
67. loglevel 0
    
68. TLSCertificateFile /etc/ssl/servercerts/servercert.pem
    
69. TLSCACertificatePath /etc/ssl/certs/
    
70. TLSCertificateKeyFile /etc/ssl/servercerts/serverkey.pem
    
71. database bdb
    
72. suffix "dc=site"
    
73. rootdn "cn=Administrator,dc=site"
    
74. rootpw "{ssha}QCFxfa8jl/QsGh7WBZd0CFP5kGxRS1JKRg=="
    
75. directory /var/lib/ldap
    
76. checkpoint 1024 5
    
77. cachesize 10000
    
78. index objectClass,uidNumber,gidNumber eq
    
79. index member,mail eq,pres
    
80. index cn,displayname,uid,sn,givenname sub,eq,pres
    

复制代码

liceven-desktop:/etc/openldap # ldapsearch -x -D "cn=Administrator,dc=site" -W
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1

可是我想自己按照http://bbs.chinaunix.net/thread-924763-1-1.html配置这个文件：
把：

1. database bdb
   
2. suffix "dc=site"
   
3. rootdn "cn=Administrator,dc=site"

复制代码

改成：

1. suffix “o=Acme,c=UK”
   
2. rootdn  “cn=admin,o=Acme,c=UK”
   
3. 
   

复制代码

然后想自己添加：

1. dn: o=Acme,c=UK
   
2. o: Acme
   
3. objectClass: top
   
4. objectClass: organization
   
5. dn: ou=Sales,o=Acme,c=UK
   
6. ou: Sales
   
7. objectClass: top
   
8. objectClass: organizationalUnit

复制代码

可是这样作好像不行。运行：ldapsearch -x -D “cn=admin,o=Acme,c=UK” -W
就出错了：ldap_bind: Invalid DN syntax (34)
        additional info: invalid DN
帮忙，这是怎么回事阿？我该怎么修改阿？
谢谢！

aries1998

slapcat > /tmp/xxx.ldif 看看里面有东西吗？

yexin218

xxx.ldif 的内容是：

1. dn: o=Acme,c=UK
   
2. o: Acme
   
3. objectClass: top
   
4. objectClass: organization
   
5. 
   
6. dn: ou=Sales,o=Acme,c=UK
   
7. ou: Sales
   
8. objectClass: top
   
9. objectClass: organizationalUnit

复制代码

[ 本帖最后由 yexin218 于 2007-10-6 21:12 编辑 ]

yexin218

问题还在啊？

lhm0000

-f 加上啊，还有要有.ldif文件名作为参数

oldcaption

是不是ldif文件的问题，从ms机器到unix上文件的格式会不同
试试：
dos2unix
iconv