Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

To start, I am an OpenLDAP newbie. I hope my terminology is correct, but there's no guarantee.

I am trying to migrate our OpenLDAP server to a new box and, in the process, update our LDAP tree to accurately reflect our current organization name. When the original server was set up in 2004, our organization has a different name that has had to persist in our DNS records and other random places. I'm trying to get rid of that legacy name.

I have successfully migrated our original database from the original server to the new server. I am now trying to figure out how to move our Root DSE to the correct root-level DC. An example might help:

Current Root: (What it currently is)


New Root: (What it should become)


We use Apache Directory studio to manage our OpenLDAP server. When I tried to [naively] just change the root to the new name, I got this error:

-[LDAP: error code 71 - cannot rename between DSAs]


The part that I earlier had about neither tree showing up was an SELinux problem. The type was set wrong on the new database, which was causing neither tree to show up.

I am still having the problem of not being able to move between DSAs. How can I get around that?

share|improve this question

I figured out a work-around for this. If I copy the records over from the original tree, I am able to do it. Moving does not work, due to the "cannot rename between DSAs" error.

I thought I would post this answer to help anyone having this trouble, but if anyone has the "proper" answer, I would appreciate it!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.