ldapadd在LDIF文件中的大多数条目上抛出“操作错误（1）”。 我已经select了一个具体的例子，并尝试像userPassword和userAccountControl属性无济于事。 脚本需要在Samba和Active Directory之间互操作，这就是为什么我不使用“samba-tool user create”
这是LDIF
dn: CN=Irene.Toth,OU=acme_ou,DC=acme,DC=dev changetype: add objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: Irene.Toth sn: Toth c: DE l: Bremerhaven st: Bremen postalCode: 27574 title: Representative telephoneNumber: +49-471-372727 givenName: Irene distinguishedName: CN=Irene.Toth,OU=acme_ou,DC=acme,DC=dev instanceType: 4 whenChanged: 20170426202003.0Z whenCreated: 20170426202003.0Z displayName: Irene Toth uSNChanged: 114938 uSNCreated: 114936 department: Sales company: acme Corp. streetAddress: Schiffdorfer Chaussee 227 employeeNumber: 617183 name: Irene.Toth userAccountControl: 512 codePage: 0 countryCode: 0 accountExpires: 9223372036854775807 sAMAccountName: Irene.Toth userPrincipalName: [email protected] objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=acme,DC=dev dSCorePropagationData: 16010101000000.0Z mail: [email protected] 这是命令行和错误消息
# ldapadd -c -x -h acme-samba -D "CN=Administrator,CN=Users,DC=acme,DC=dev" -w "Password1" -f irene.ldif adding new entry "CN=Irene.Toth,OU=acme_ou,DC=acme,DC=dev" ldap_add: Operations error (1) additional info: 00002020: operations error at ../source4/dsdb/samdb/ldb_modules/password_hash.c:2816
Samba版本
smbd --version Version 4.5.3
ldapadd -V
ldapadd: @(#) $OpenLDAP: ldapmodify 2.4.40 (Nov 6 2016 01:21:24) $ [email protected]:/builddir/build/BUILD/openldap-2.4.40/openldap-2.4.40/clients/tools (LDAP library: OpenLDAP 20440) ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)
还有一些系统信息
# cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7"