active directory - How to replace accountExpires in LDAP / AD using ldapadd? -
my ldif-file is:
dn: cn=test person,ou=foo,dc=bar,dc=oof,dc=rab,dc=de changetype: modify replace: accountexpires accountexpires: 9223372036854775808
the output:
root@comp:~# ldapadd -h host -f test.ldif sasl/gssapi authentication started sasl username: [...] sasl ssf: 56 sasl installing layers modifying entry "cn=test person,ou=foo,dc=bar,dc=oof,dc=rab,dc=de" ldapadd: invalid syntax (21) additional info: 00000057: ldaperr: dsid-0c090b7c, comment: error in attribute conversion operation, data 0, v1db0
what doing wrong? wrong syntax?
all other things dn, connection, host et cetera checked , okay.
thank answers!
it seems passed maximum (set default ad when creating user), because did work:
dn: cn=test person,ou=foo,dc=bar,dc=oof,dc=rab,dc=de changetype: modify replace: accountexpires accountexpires: 9223372036854775807
(... , way: it's long.max_value). bad idea increment on test ...
Comments
Post a Comment