Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.
Sign up to join this community
When attempting to load the following configuration
dn: olcDatabase={1}hdb,cn=config
changetype: modify
add: olcMirrorMode
olcMirrorMode: TRUE
I get the following error:
root@box:~# ldapadd -Y EXTERNAL -H ldapi:/// -f mirrormode.ldif
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
ldapadd: wrong attributeType at line 4, entry "olcDatabase={1}hdb,cn=config"
It looks fine to me -- what's the problem?
The problem turned out to be a trailing space on on this line:
add: olcMirrorMode
Grrr!
(export GREP_COLOR='0;41'; grep --col -Enm5 '\s+$' your.ldif) to remove: sed -ri 's,\s+$,,g' your.ldif
export (just remove the semicolon): GREP_COLOR='0;41' grep --col -Enm5 '\s+$' your.ldif
Jul 25, 2019 at 17:50
I've stepped on the same rake today, but there were no trailing spaces, there were another hidden joke.
My colleague have sent me a sample LDIF with a question, I tried to reproduce the problem he encountered by copying the text from the colleague's message. I've been struggling to understand what is wrong for an hour, before I understood that there was Unicode symbol U+00A0 (0xC2 0xA0) instead of ASCII SPACE (0x20).
Thanks to vim and its syntax highlighting, vim was desperately trying to give me a clue: 
In my case I missed to put a hyphen between multiple updates.
Wrong:
dn: cn=John Doe,ou=user,dc=example,dc=com
changetype: modify
add: disabled
disabled: 0
add: activity
activity: INACTIVE
ldapmodify: wrong attributeType at line 5, entry "cn=John Doe,ou=user,dc=example,dc=com"
Correct:
dn: cn=John Doe,ou=user,dc=example,dc=com
changetype: modify
add: disabled
disabled: 0
-
add: activity
activity: INACTIVE
