Initially olcDatabase={2}config.ldif file was in non-prod and it does not have any entries of database and password as well that is why I was getting error as �ldap_bind: Invalid credentials (49)� , I was comparing with my production olcDatabase={2}config.ldif file then I got to know that many entries are not present in my non prod olcDatabase={2}config.ldif, so trying to modify the same based on production entries but I am getting an error as �ldapmodify: wrong attributeType at line 6, entry "olcDatabase={2}hdb,cn=config"� .Please find all the entry detail as mentioned below. Please suggest
Initially NON-Prod olcDatabase={2}config.ldif
***************************************
[root@******B cn=config]# cat olcDatabase={2}config.ldif
# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 6cc08c20
dn: olcDatabase={2}config
objectClass: olcDatabaseConfig
olcDatabase: {0}config
structuralObjectClass: olcDatabaseConfig
entryUUID: 7d38f93a-8a93-1039-8a5b-e71f3acefefd
creatorsName: cn=config
createTimestamp: 20191024101921Z
olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=extern
al,cn=auth" manage by dn.base="cn=Manager,dc=np,dc=bigdata,dc=eqh" manage b
y * none
olcRootPW:: e1NTSEF9dGVSTlBBOGp4Y3hBUEFyV0FhVk5JYmgwN04zM3gwV1Q=
entryCSN: 20191029071513.693484Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20191029071513Z
PROD Entries of olcDatabase={2}config.ldif
*************************************
[root@********A cn=config]# cat olcDatabase={2}hdb.ldif
# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 69367fd5
dn: olcDatabase={2}hdb
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {2}hdb
olcDbDirectory: /var/lib/ldap
olcDbIndex: objectClass eq,pres
olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
structuralObjectClass: olcHdbConfig
entryUUID: a18c51e2-721a-1039-90fa-db25c3c74803
creatorsName: cn=config
createTimestamp: 20190923065345Z
olcSuffix: dc=bigdata,dc=eqh
olcRootDN: cn=Manager,dc=bigdata,dc=eqh
olcRootPW:: e1NTSEF9RmZJZ3I0czZ1SHc5QmNlQXpnNS9EaHF2Yms0aDd0d3E=
olcAccess: {0}to dn.base="" by * read
olcAccess: {1}to dn.base="cn=Subschema" by * read
olcAccess: {2}to attrs=userPassword,userPKCS12 by self write by * auth
olcAccess: {3}to attrs=shadowLastChange by self write by * read
olcAccess: {4}to dn.subtree="ou=Kerberos,dc=bigdata,dc=eqh" by dn.exact="cn= kdc-service,ou=Services,dc=bigdata,dc=eqh" read by dn.exact="cn=adm-service,ou=Services,dc=bigdata,dc=eqh" write by * none
olcAccess: {5}to dn.subtree="ou=Users,dc=bigdata,dc=eqh" by dn.exact="cn=kdc-service,ou=Services,dc=bigdata,dc=eqh" read by dn.exact="cn=adm-service,ou=Services,dc=bigdata,dc=eqh" write by * read
olcAccess: {6}to * by * write
olcDbConfig: {0}set_cachesize 0 10485760 0
olcDbConfig: {1}set_lg_regionmax 262144
olcDbConfig: {2}set_lg_bsize 2097512
olcDbConfig: {3}set_flags DB_LOG_AUTOREMOVE
entryCSN: 20190924125413.148008Z#000000#000#000000
modifiersName: cn=Manager,dc=bigdata,dc=eqh
modifyTimestamp: 20190924125413Z
trying to modify NON-Prod entries of olcDatabase={2}hdb.ldif
****************************************************
cat <<EOF > olcDatabase={2}hdb.ldif
dn: olcDatabase={2}hdb,cn=config
changetype: modify
add: objectClass
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
add: olcdatabase
olcDatabase: {2}hdb
add: olcDbDirectory
olcDbDirectory: /var/lib/ldap
add: olcDbIndex
olcDbIndex: objectclass eq,pres
olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
replace: olcSuffix
olcSuffix: dc=np,dc=bigdata,dc=eqh
replace: olcRootDN
olcRootDN: cn=Manager,dc=np,dc=bigdata,dc=eqh
add: olcRootPW
olcRootPW: {SSHA}hdkz5LTdlU0QYfuAIdIxlvaoswiVJanY
add: olcAccess
olcAccess: {0}to dn.base="" by * read
olcAccess: {1}to dn.base="cn=Subschema" by * read
olcAccess: {2}to attrs=userPassword,userPKCS12 by self write by * auth
olcAccess: {3}to attrs=shadowLastChange by self write by * read
olcAccess: {4}to dn.subtree="ou=Kerberos,dc=bigdata,dc=eqh" by dn.exact="cn=kdc-service,ou=Services,dc=np,dc=bigdata,dc=eqh" read by dn.exact="cn=adm-service,ou=Services,dc=bigdata,dc=eqh" write by * none
olcAccess: {5}to dn.subtree="ou=Users,dc=bigdata,dc=eqh" by dn.exact="cn=kdc-service,ou=Services,dc=np,dc=bigdata,dc=eqh" read by dn.exact="cn=adm-service,ou=Services,dc=bigdata,dc=eqh" write by * read
olcAccess: {6}to * by * write
add: olcDbConfig
olcDbConfig: {0}set_cachesize 0 10485760 0
olcDbConfig: {1}set_lg_regionmax 262144
olcDbConfig: {2}set_lg_bsize 2097512
olcDbConfig: {4}set_flags DB_LOG_AUTOREMOVE
EOF
Getting Below error while running ldapmodify
*************************************************************
[root@*******B openldap]# sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f olcDatabase={2}hdb.ldif
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
ldapmodify: wrong attributeType at line 6, entry "olcDatabase={0}hdb,cn=config"