Add Windows User to ADAM Role using LDIFDE.exe

I'm trying to add a Windows user to an ADAM role by creating an LDIF
file and importing it into ADAM using ldifde.exe. I found this post
which seems to be exactly what I need, but I can't get it to work
(http://groups.google.ca/group/microsoft.public.windows.server.active_directory/browse_frm/thread/d670e854e40cec46?tvc=1).

Here's my LDIF file:
dn: CN=Readers,CN=Roles,CN=MyApp,DC=MyCompany,DC=COM
changetype: modify
add: member
# member: <SID=S-1-5-21-1644491937-113007714-1957994488-1007>
-

I got the SID by manually adding a windows user to a role using
ADAM-AdsiEdit and then exporting that role using ldifde.exe

The error I'm getting is:
===
There is a syntax error in the input file

Failed on line 5. The last token starts with 'm'.

An error has occurred in the program
===

In the post I mentioned above Dmitri's (last poster) LDIF specifies the
SID using both the <SID=XYZ> and base64 encoded method. Is that
required? (If it is, I couldn't get that working either).

So, am I missing something obvious here or does LDIFDE.exe actually not
support this?

Also, I'm under the impression that LDIFDE.exe (or probably ADAM) will
automatically create a ForeignSecurityPrincipal for me, if needed, when
I add the user to the role.

.

Relevant Pages

  • Re: ADAM Proxy Bind re-direction
    ... I would just want to add that if you have added the Windows user to a group an FSP will be created which will represent the Windows user in the directory and you will see be able to use pass through auth. ... Pass-through auth is where you do a secure bind to ADAM with a Windows user's credentials to authenticate an Windows user. ... There are two main reasons to use bind proxy: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Creating User Proxy in ADAM
    ... a proxy will work for "authentication delegation". ... Just bind to ADAM as a Windows user. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADAM sync problem
    ... I have a real hard time synchronizing my ADAM with our AD here. ... I do not import any ldif files and finish the setup. ... use the AD Schema Analyzer to create an ldif file that I would import ... I create the ldif file and import it in my ADAM. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Add Windows User to ADAM Role using LDIFDE.exe
    ... Create an LDIF file that adds a Windows user to the Readers role. ... Note that if you having been testing this by against your ADAM instance ...
    (microsoft.public.windows.server.active_directory)
  • Re: Errors Importing Schema and Objects from an Entire Forest
    ... You are correct Lee, and i know have some updated status. ... generate the LDIF with schema elements. ... ADAM local host again and it worked without any errors this time. ...
    (microsoft.public.windows.server.active_directory)
Loading