Como importo para o ADAM / AD LDS - O tipo de instância especificado é inválido

Question

Estou com dificuldades para importar um arquivo LDIF para o ADAM / AD LDS, e o erro está abaixo (o tipo de instância é inválido).

Eu testei e recuperei de erros relacionados a

• O arquivo de importação é ASCII, UTF8, ANSI
• Propriedades inválidas no arquivo de importação (objetos internos do MS para replicação)
• No AD, o nome do contêiner de usuários é um CN , no ADAM é "OU"
• Alterou a classe de objeto de teste de contact para user em maker.ldf
• erros diversos ..

Meu objetivo geral é mover dados de certificado do ADDS para o AD LDS e expor essa cópia do LDS para o mundo.

Eu agora atingi uma parede e estou preso, incapaz de importar um certificado para a instância. Para garantir que estou fazendo as coisas logicamente corretas, estou fazendo uma exportação e uma importação, conforme mostrado abaixo.

Pergunta

• Como importo os dados como mostra a amostra Importar?

AMOSTRA DE EXPORTAÇÃO

Linha de comando

PS C:\test> ldifde -f .\test.ldf -v -s 127.0.0.1  -d "DC= FreeSMIME, DC=COM"
Connecting to "127.0.0.1"
Logging in as current user using SSPI
Exporting directory to file .\maker.ldf
Searching for entries...
Writing out entries
 .... SNIP ... 
Exporting entry: CN=test12,OU=Users,DC=FreeSMIME,DC=com

9 entries exported

Conteúdo do test.ldf

dn: CN=test12,OU=Users,DC=FreeSMIME,DC=com
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: test12
distinguishedName: CN=test12,OU=Users,DC=FreeSMIME,DC=com
instanceType: 4
whenCreated: 20140706175425.0Z
whenChanged: 20140706175425.0Z
uSNCreated: 13981
uSNChanged: 13981
name: test12
objectGUID:: FGuCH4ep+0yvXyXIGZnw6Q==
badPwdCount: 0
badPasswordTime: 0
pwdLastSet: 130491428650358040
objectSid:: AQUAAB/DvlvT9kQDKv5c3yyu4EqPUic3jHkmDg==
objectCategory: 
 CN=Person,CN=Schema,CN=Configuration,CN={EBB3EB07-5375-4D67-B774-42E7D82935A8}
dSCorePropagationData: 16010101000000.0Z
msDS-UserAccountDisabled: TRUE

AMOSTRA DE IMPORTAÇÃO

Linha de comando

PS C:\test> ldifde -i -k -f .\maker.ldf -v -s 127.0.0.1 Connecting to "127.0.0.1" Logging in as current user using SSPI Importing directory from file ".\maker.ldf" Loading entries 1: DC=FreeSMIME,DC=com

Add error on entry starting on line 1: Unwilling To Perform The server side error is: 0x2079 The specified instance type is not valid. The extended server error is: 00002079: SvcErr: DSID-033309B0, problem 5003 (WILL_NOT_PERFORM), data 0

0 entries modified successfully. An error has occurred in the program No log files were written. In order to generate a log file, please specify the log file path via the -j option.

Conteúdo do maker.ldf

dn: [email protected],OU=Users,DC=FreeSMIME,DC=com
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: [email protected]
userCertificate:: 
 MIIFUTCCBDmgAwIBAgITHwAAADzW+zggKBd9dQABAAAAPDANBgkqhkiG9w0BAQUFADB0MQswCQYDVQ
 QGEwJ1czEVMBMGA1UEChMMQml0Y2xlYXIgTExDMRYwFAYDVQQLEw1FbWFpbCBQcml2YWN5MRYwFAYD
 VQQDEw1GcmVlU01JTUUuY29tMR4wHAYDVQQDExVTZWN1cmUgSXNzdWVyIDAxYS0wMDEwHhcNMTQwNz
 A2MDQyNDQyWhcNMTUwMTAyMDQyNDQyWjCBgzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk5ZMQwwCgYD
 VQQHEwNOWUMxEzARBgNVBAsTClRlY2hub2xvZ3kxHjAcBgNVBAMMFW1ha2Vyb2Z0aGluZ3M3QG1lLm
 NvbTEkMCIGCSqGSIb3DQEJARYVbWFrZXJvZnRoaW5nczdAbWUuY29tMIIBIjANBgkqhkiG9w0BAQEF
 AAOCAQ8AMIIBCgKCAQEAymz3YPRVAE2i1X7XmmrBk+SmsH1FAyYEhNkKpDn6R+1Za8n5OC4UseQwCs
 HoM/PtZ50JYViPW1+qBykehkH4LylCkp5OIjZbodedcIL+ucDHh1PITNChp8C5fQWYmfiUofWF8ztA
 yGJNriy9VO30JFq9xexnif7i04kxdd151/BjOW5FEGOrpZJajoLkQycfbtdexxrKvGbSNsZZ4dwKVy
 uxRcXXwgT9p8wa51uMGMBdpFsKTRkmFl8nvx1zRdcGfl7CkKLCRmZkoCPP+vgyqGUtO+bYxSP6vc0t
 hZ7efXOkoDQWMfj/EHcKGWJgGm4B+l4SG9Pfkujr+Miw1CxHvwIDAQABo4IByjCCAcYwPQYJKwYBBA
 GCNxUHBDAwLgYmKwYBBAGCNxUIgq30IYfppWqGlZ8EhYL3L4GCyxkhhZLlIIb5vHACAWQCAQ4wEwYD
 VR0lBAwwCgYIKwYBBQUHAwQwDgYDVR0PAQH/BAQDAgUgMBsGCSsGAQQBgjcVCgQOMAwwCgYIKwYBBQ
 UHAwQwRAYJKoZIhvcNAQkPBDcwNTAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsO
 AwIHMAoGCCqGSIb3DQMHMB0GA1UdDgQWBBSruXcob9eIxbsorVGMF6m+w7LACTAfBgNVHSMEGDAWgB
 TaxAaP6+QX4fmgA8d0h36ZY/fwRjBNBgNVHR8ERjBEMEKgQKA+hjxodHRwOi8vcGtpLmJpdGNsZWFy
 LnVzL2kwMWEvU2VjdXJlJTIwSXNzdWVyJTIwMDFhLTAwMSgxKS5jcmwwbgYIKwYBBQUHAQEEYjBgMF
 4GCCsGAQUFBzAChlJodHRwOi8vcGtpLmJpdGNsZWFyLnVzL2kwMWEvYS5Jc3N1ZTAxLmJpdGNsZWFy
 LnVzX1NlY3VyZSUyMElzc3VlciUyMDAxYS0wMDEoMSkuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQA/6K
 tRc0Nq5hdJouyTMNMUju+DW2Px2gVfAx6h7UWdG76FVJ14CuTCuS0zLngmO102eeTo9//ZOKE5UcdP
 JmlegIam0ne8uNELInIY8HancU5fW34O+Jxa/ZqOMzXiHyKwTC4dwBsgP0TjHQsnYzSIAM/pB7fpBw
 FYUeqcz3XmsjbasQazCotCuAXIIPaqW2hC7KbEXDCaCdLAWWQ8erd+CeNmmclP5GXi2ZvxVDOW8l/F
 nGRQSrMTkZz4Rc2jS9w6VlGBMR+GXPQ9rJmxSl89WLATsejYFbDwbM5nKGJfpTZVf1SYnKGb9ficVu
 eHeuwv1fGAV4s9zHSCsk33EElS
distinguishedName: 
 [email protected],CN=Users,DC=FreeSMIME,DC=com
instanceType: 4
name: [email protected] 
objectCategory: 
 CN=Person,CN=Schema,CN=Configuration,DC=FreeSMIME,DC=com
mail: [email protected]

    

Answer 1

Consegui corrigir o arquivo de importação removendo a linha:

objectCategory: 
 CN=Person,CN=Schema,CN=Configuration,DC=FreeSMIME,DC=com