Re: import error with ldifde



To modify the membership of a group, you have to modify the member attribute
on the group. You can't modify the memberOf attribute on a user, as that is
a backlink and is not editable.

From the perspective of LDIF, it really comes down to having the DN of the
group in question and the DN of the user you created previously to set on
the member attribute.

If you are trying to recreate a tree of groups in the new domain, you could
export the groups in question as well an them import them using a similar
transform on the DN.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"B L Muzzy" <bob.muzzy@xxxxxxxxxxxx> wrote in message
news:eVlrzVl0IHA.2188@xxxxxxxxxxxxxxxxxxxxxxx
I exported an OU to a file with ldifde according to MS recommendation in :
http://technet.microsoft.com/en-us/library/bb727091.aspx.

I edited the file for a new domain, ie.

from : dn: CN=sean,OU=test,OU=Clients,DC=sampleXYZ,DC=com
to: dn: CN=sean,OU=test,OU=Clients,DC=qatest,DC=com

When I try to import that file into a diferent domain, I get an error

"Add error on line 1: Invalid Syntax
The server side error is "The parameter is incorrect."

as far as I can tell it's because the export file includes lines like:

memberOf: CN=testgroup1,OU=test,OU=Clients,DC=qatest,DC=com

Does anyone know if and how to get ldifde to add a user to an existing
group, or possibly how to create one?



.



Relevant Pages

  • Re: Return by value -- primitive type vs class type
    ... Yes, it technically invokes an operator function, but the semantics still ... reflect a direct modification of an rvalue that's being returned from the ... even though it is going "through" a member function ... can you successfully invoke a mutating function, yet not "modify the ...
    (comp.lang.cpp)
  • Re: Time Based Distribution List?
    ... There is a risk to the specific list you are modifying, ... changetype: modify ... in the member section where you have ... For the 8am scheduled task: ...
    (microsoft.public.exchange.admin)
  • Re: Access an OU via LDAP from a non-member machine
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... when I try to execute this piece of VBS on a member machine ... the domain (in the security tab of the OU seems not)? ...
    (microsoft.public.windows.server.active_directory)
  • RE: Collisions between converter(?) and TSO?
    ... Yes, I am modifying the member ... I've got 20 or so jobs that exercise ... Collisions between converter(?) and TSO? ... Your OP said "Modify a JCL INCLUDE used by the job." ...
    (bit.listserv.ibm-main)
  • Re: Cannot modify some groups/users in AD
    ... there is a global group that is grayed ... and I looked at the "member of" tab but it isn't a member of a ... "protected group". ... >> I have noticed that I cannot modify some groups and users in ADUC. ...
    (microsoft.public.win2000.active_directory)