Hello. Newish admin here. Any thoughts on the stuff below? Thanks,
Stephen

I'm trying to modify group membership for a batch of users using ldif.
I'm aware of the four attributes that need to be modified on the User
and Group objects to do this. The ldif examples are below.

I'm running into the following:
1) when using the add snippet below, I get "LDAP: error code 20 - NDS
error: duplicate value (-614)" and the User's groupMembership is not
added. I've verified the value does not exist.
2) when using the delete snippet below, I get "LDAP: error code 16 - NDS
error: no such value (-602)" *whether or not* the groupMembership
exist.

Notes:
* I'm using the admin user.
* I can add and remove the membership with iManager.
* I can add and remove the groupMembership attribute individually with a
tool like Apache directory studio.
* The ldif snippets below fail in Apache Directory Studio, ldapmodify,
and the ICE tool.

This happens on two separate trees with these versions:
* Binary Version: 20702.02, Product Version: eDirectory for Linux x86_64
v8.8 SP7 [DS]
* Binary Version: 20701.48, Product Version: eDirectory for Linux x86_64
v8.8 SP7 [DS]


version: 1

dn: cn=Karma,ou=Groups,o=utc
changetype: modify
add: equivalentToMe
equivalentToMe: cn=user1,ou=Users,o=utc
-
add: member
member: cn=user1,ou=Users,o=utc

dn: cn=user1,ou=Users,o=utc
changetype: modify
add: groupMembership
groupMembership: cn=Karma,ou=Groups,o=utc
-
add: securityEquals
securityEquals: cn=Karma,ou=Groups,o=utc



And


version: 1

dn: cn=Karma,ou=Groups,o=utc
changetype: modify
delete: equivalentToMe
equivalentToMe: cn=user1,ou=Users,o=utc
-
delete: member
member: cn=user1,ou=Users,o=utc

dn: cn=user1,ou=Users,o=utc
changetype: modify
delete: securityEquals
securityEquals: cn=Karma,ou=Groups,o=utc
-
delete: groupMembership
groupMembership: cn=Karma,ou=Groups,o=utc


--
sleather
------------------------------------------------------------------------
sleather's Profile: https://forums.netiq.com/member.php?userid=9259
View this thread: https://forums.netiq.com/showthread.php?t=53085