Hot answers tagged

17

The solution : So here's what I did to make this works. Stop Slapd on main server Slapcat databases from the main server (There are 2 database that needs to be exported. I use the "-n" tag slapcat -n 0 -l (config file location) This one will export all schema and cn=config and slapcat -n 1 -l <database backup ldif path> This on will export ...


9

This TechNet article goes into great detail about how to sieze the roles. Don't panic, the domain can function with both if those roles offline for a fairly long amount of time. Don't rush the recovery process because you're nervous. I would promote a new DC first, so that you have two in your domain, then worry about seizing the roles. In addition to ...


8

Since this was really a GUI Issue, (another example of why its best to learn things on the CLI), my answer will be a Picture. But long story short is I was reading the directions to fast! "Adding a user with SSH public key in phpLDAPadmin First, create a user with the “Generic: User Account” template. Then, go to the “objectClass” attribute section, click “...


6

If you only want the CREATE TABLE statements, then you can do pg_dump -s databasename | awk 'RS="";/CREATE TABLE[^;]*;/'


6

No, the situation you describe is not possible. A domain controller will not replicate an object from a different schema than its own. Active Directory is a little smarter than that. :) From TechNet: Effect of Schema Changes on Replication Attribute definitions are stored in attributeSchema objects in the schema directory partition. Changes to ...


6

Export both trees (cn=config and your regular data) into LDIF, import them back on the new server (cn=config first). Done. Also, cn=config is essentially just a collection of LDIF files and it might be possible to just copy this collection to the same relative location on the new server (while slapd is not running).


6

The short answer is that there are only really a couple attributes that are intended for cosmetic metadata on a user account like description and info. Even the extensionAttributeX ones aren't really intended for your customization. They're part of the Exchange schema extensions and should be considered "reserved" if you're actually running Exchange. A ...


5

Using an auxiliary class means that your private extensions are contained within this class and can be handled as one entity, and it is separated from the standard user class, avoiding conflicts. As this has no drawbacks and might avoid potential problems down the road, I can't think of a single reason why anyone would even consider to extend the user class ...


5

Your structure looks generally good enough. My one suggestion is this. Don't get do per-department or per-program OUs unless the computers are dramatically different, or your departments are huge and you actually need them to be separate because of how many objects would be in a single OU that combined everyone. I don't know about your organization but ...


5

The term "best-practices" when referring to the structure of your Active Directory is very open ended. There are a variety of factors that will determine what will make the most sense for you in your environment, and Microsoft identifies that what works for one enterprise will not necessarily work for another one. That said, Microsoft recommends that you ...


5

I have managed to get it working: sudo service slapd stop sudo slapcat -n0 > ~/config.ldif (configuration backup) sudo slapcat -n1 > ~/users.ldif (users and groups backup) delete the contents of the folder /etc/ldap/slapd.d (or rename and create a new slapd.d folder) delete the contents of the folder /var/lib/ldap (or rename and create a new ldap ...


4

Use --opt option while making the dump: mysqldump -hserver -uUser -ppasswd -no-data --opt export > export.sql


4

CN denotes a common name and is used to denote well-known AD containers such as Users, Computers, System, etc. When create your own Users OU, you've done just that, create an OU, so you no longer use the CN= syntax, you use the OU= syntax for that part of the path. In the example you've provided, if you're just specifying a path to the objects, you wouldn't ...


4

The employeeNumber field while not viewable via the GUI is still able to be queried by anyone with read access to AD if I'm not mistaken. It may take more effort than "Outlook" though. But honestly...it's the last 4 of the SSN...so I think your approach, if management is fine with it, is good enough. Just make sure you don't care about an actual employee ...


3

The default, out of the box schema already contains both an employeeNumber and an employeeID attribute... Reading the attributes: PS H:\> Get-ADUser jbob -Properties EmployeeId,EmployeeNumber DistinguishedName : CN=JoeBob,OU=Users,OU=Bros,DC=contoso,DC=com EmployeeID : A1B2C3 EmployeeNumber : 1234556 Enabled : True GivenName ...


3

No, AD schema attributes should be considered permanent. If you only want the attribute to not appear in the Attribute Editor tab, or other dialogs where an object may present the list of possible attributes, you may want to try editing the User class object in AD Schema MMC, and removing the attribute from the list of optional attributes. You would need ...


3

A schema is just a container (i.e. a place for objects to live) in SQL Server. That said, there should be little to no performance implications with having a large number of schemas. That said, 100 sounds like a large number. Rhetorically, what are you trying to accomplish by having so many?


2

I'm not sure how to limit this to a certain schema (though your syntax looks like it should work) but if it's acceptable to have execute rights on the entire database the following will do the trick, then add your login to the role like Ankur describes. grant execute to <ROLE_NAME> Also, granting VIEW DEFINITION to this role will aloow the logins in ...


2

Mysqldump won't have any options to dump only on views.The below command will help you to take the backup of only views. mysql -uroot -pPassword INFORMATION_SCHEMA --skip-column-names -e "select table_name from tables where table_type = 'VIEW' and table_schema = 'sakila'" | xargs mysqldump -u root -pPassword sakila > only_views.sql


2

There are several possible causes. The likely cause is that your domain functional level is not yet set to windows 2003. Once that's been established check out this KB article: http://support.microsoft.com/kb/886705


2

CN=ms-Exch-Extension-Attribute-14,CN=Schema,CN=Configuration,DC=example,DC=com Its rangeUpper is 2048. See MSDN for more details: http://msdn.microsoft.com/en-us/library/ms980479(v=exchg.65).aspx


2

As for finding what's using the attributes, I think your best hope is some rather severe logging of the directory service access events by enabling the setting for it in the audit config of the Domain Controllers GPO, as well as setting aggressive audit ACLs to inherit throughout the domain. The logs will likely get very noisy. If possible, the new ...


2

This is not normal behavior, no, the mongo shell itself is quite lightweight and should consume very little resources unless you are running something complex in terms of javascript. A simple connection to a mongod instance should not cause this kind of problem. Despite running the shell and mongod on multiple VMs I have never seen this behavior, hence I ...


2

According to this stackoverflow question (link), you can generate it xsd.exe unattend.xml I did some keyword search for all xsd files in MDT, following file match publicKeyToken, language, and processorArchitecture (but no versionScope) C:\Program Files\Microsoft Deployment Toolkit\Templates\Packages.xsd It seems I am running to dead end even from MS ...


2

psst! Hey you! Yeah you, the confused looking dude! This isn't reddit! :-) Also, more importantly, that's not how you add schemas in OpenLDAP (see the manual) -- You want to add an include /path/to/the/schema/file directive to the LDAP server's configuration file (/etc/openldap/slapd.conf). Something like include /etc/openldap/schema/apple.schema ...


2

Try ldapadd -Q -Y EXTERNAL -H ldapi:/// -f filesystem.ldif This will only work if you work as root (uid=0) or via sudo and on the LDAP server direct. It connects to the LDAP server based on the user id and bypasses the normal auth methods. This access is granted by the olcAccess rule {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external,...


2

This is a pretty low-risk maneuver. It'll trigger a full sync on every global catalog as the new attribute becomes part of the partial attribute set on each GC. After that full sync, the tests you would need to run are repadmin /showreps to verify that domain controllers are still replicating, and then perform a search on the new attribute across domains to ...


2

Is it possible, and what would happen if the forest-prep data arrived first at an out of date DC before the schema? The forest prep process for Lync does not touch any attributes created by the Lync AD schema extension as far as I can tell. See here for a list of what the forest prep is doing: http://technet.microsoft.com/en-us/library/gg425791.aspx That ...


2

This function creates a data dump, not imports it, which is the opposite of what you want to do. The TEXT you are referring to is the path to the CSV file it will generate. PgAdmin 1.4 seems to have a restore facility: http://www.pgadmin.org/docs/1.4/restore.html If you are trying to import data into a single table, you can right click on the table in ...


Only top voted, non community-wiki answers of a minimum length are eligible