On Montag, 14. April 2008, Michael Green wrote:
Ralf,
Thank you for your clear and detailed explanation! I don't mind at all to send the enhancement request. Which type of ER is most appropriate for that: "Feature Enhancement" or "Problem with Existing Problem" or it doesn't matter? I am not exactly sure what you are referring to, here. Especially what "Problem with Existing Problem" is. :)
Another q: While trying to add my _first_ user via useradd I stumbled upon the following error:
gene2:~ # useradd -D "cn=admin,dc=biocl,dc=weizmann,dc=ac,dc=il" --service ldap lssafran Enter LDAP Password: Cannot find base ou for new users. LDAP information update failed: Operations error
I've also noticed, that after having added at _least_ one user via YaST, I can then add any number of users via useradd without problem. Hm, it seems that useradd is unable to find a suitable parent object for the new user. I don't know exactly what useradd does here. Might be worth another feature request (allowing to specify the parent object for a new user).
Can this error be avoided without using YaST, i.e. by adding the first and all subsequent users via useradd only?
And by the way, as in case of groups, users added via YaST and via useradd appear differently in ldapsearch:
# User lssafran was added via YaST [..]
# User michaelg was added via useradd [..]
I guess it can be at least partly attributed to the fact that useradd is not exactly LDAP-savvy. For example, it gives no way to provide attribute=value pairs (required by LDAP) which are not part of /etc/passwd line such as givenName and surName (sn). This attributes usually get there as a simple text string under "comment" umbrella of -c flag along with telephone number and God knows what else. Is my guess right or/and I'm missing something? I think you guess is pretty accurate.
-- Ralf Haferkamp SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org