unable to do import

[Oliver Rieder]

heja,

i´m having serious trouble doing a simple import.
short summarize: i can´t import a contact i´ve just exported though i´m
domain and schema admin

long version:
i got a txt file, which i exported from our w2k domain (all our contacts),
and i want to import this now to our new w2k3 with ldifde.

then i exported a just generated contact and tried to import it but i
failed, too.

options used:
lidfde -i -f c:\ab.txt -v -k -j c:\
__
C:\>ldifde -i -f ab.txt -k -v
Connecting to "server.domain.suffix"
Logging in as current user using SSPI
Importing directory from file "ab.txt"
Loading entries
1: CN=Huber\, Anton,OU=Kontakte,DC=domain,DC=suffix

Add error on line 1: Unwilling To Perform
The server side error is "The modification was not permitted for security
reason
s."
0 entries modified successfully. the -j option (ldif.log) says:
"Connecting to "w2k3misat01.domain.suffix"

Logging in as current user using SSPI

Importing directory from file "ab.txt"

Loading entries
1: CN=Huber\, Anton,OU=Kontakte,DC=domain,DC=suffix

dn: CN=Huber\, Anton,OU=Kontakte,DC=domain,DC=suffix
Attribute 0) objectClass:top person organizationalPerson contact
Attribute 1) cn:Huber, Anton
Attribute 2) sn:Huber
Attribute 3) givenName:Anton
Attribute 4) distinguishedName:CN=Huber\,
Anton,OU=Kontakte,DC=domain,DC=suffix
Attribute 5) instanceType:4
Attribute 6) whenCreated:20031219105028.0Z
Attribute 7) whenChanged:20031219105107.0Z
Attribute 8) displayName:Huber, Anton
Attribute 9) uSNCreated:123901
Attribute 10) uSNChanged:123902
Attribute 11) proxyAddresses:SMTP:[email protected] smtp:[email protected]
X400:c=AT;a= ;p=MIS AUSTRIA;o=Exchange;s=Huber;g=Anton;
Attribute 12) targetAddress:SMTP:[email protected]
Attribute 13) mAPIRecipient:FALSE
Attribute 14) mailNickname:AntonHuber
Attribute 15) internetEncoding:1310720
Attribute 16) name:Huber, Anton
Attribute 17) objectGUID: UNPRINTABLE BINARY(16)
Attribute 18) showInAddressBook:CN=Default Global Address List,CN=All Global
Address Lists,CN=Address Lists Container,CN=SITE NAME,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=domain,DC=suffix CN=All
Contacts,CN=All Address Lists,CN=Address Lists Container,CN=SITE
NAME,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=suffix
Attribute 19) legacyExchangeDN:/o=SITE NAME/ou=First Administrative
Group/cn=Recipients/cn=AntonHuber
Attribute 20)
objectCategory:CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=suffix
Attribute 21) textEncodedORAddress:c=AT;a= ;p=SITE
NAME;o=Exchange;s=Huber;g=Anton;
Attribute 22) mail:[email protected]
Attribute 23) msExchALObjectVersion:21
Attribute 24)
msExchPoliciesIncluded:{B50B5343-76E2-4652-9470-A909179E3787},{26491CFC-9E50
-4857-861B-0CB8DF22B5D7}

Add error on line 1: Unwilling To Perform

The server side error is "The modification was not permitted for security
reasons."

0 entries modified successfully.

An error has occurred in the program"
__
here what the ab.txt looks like, i just deletet the second line which was:
"changetype: add"

dn: CN=Huber\, Anton,OU=Kontakte,DC=domain,DC=suffix
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: contact
cn: Huber, Anton
sn: Huber
givenName: Anton
distinguishedName: CN=Huber\, Anton,OU=Kontakte,DC=domain,DC=suffix
instanceType: 4
whenCreated: 20031219105028.0Z
whenChanged: 20031219105107.0Z
displayName: Huber, Anton
uSNCreated: 123901
uSNChanged: 123902
proxyAddresses: SMTP:[email protected]
proxyAddresses: X400:c=AT;a= ;p=SITE NAME;o=Exchange;s=Huber;g=Anton;
targetAddress: SMTP:[email protected]
mAPIRecipient: FALSE
mailNickname: AntonHuber
internetEncoding: 1310720
name: Huber, Anton
objectGUID:: Ik1rm2LSw0WuBMjdXZff1A==
showInAddressBook:
CN=Default Global Address List,CN=All Global Address Lists,CN=Address Lists
Co
ntainer,CN=SITE NAME,CN=Microsoft
Exchange,CN=Services,CN=Configuration,DC=domain,DC=suffix
showInAddressBook:
CN=All Contacts,CN=All Address Lists,CN=Address Lists Container,CN=SITE
NAME
,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=suffix
legacyExchangeDN:
/o=MIS AUSTRIA/ou=First Administrative Group/cn=Recipients/cn=AntonHuber
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=suffix
textEncodedORAddress: c=AT;a= ;p=SITE NAME;o=Exchange;s=Huber;g=Anton;
mail: (e-mail address removed)
msExchALObjectVersion: 21
msExchPoliciesIncluded:

{B50B5343-76E2-4652-9470-A909179E3787},{26491CFC-9E50-4857-861B-0CB8DF22B5D7
}
__


i´m domain admin, have got rights on the schema master, i got only one
domaincontroller.

many thx in advance,
oliver

 

[Simon Geary]

There are some attributes that ldifde can export without problem but cannot
import. The trick here is to use the filters to only export the attributes
that are importable. For your existing output, you can either edit it in
notepad to remove the offending attributes or scrap it and start again with
a fresh export.
The next question of course is what attributes can't be imported. I'm
looking on TechNet for a KB but can't find one yet, if I do I'll post it.

 

[Oliver Rieder]

hi simon,

There are some attributes that ldifde can export without problem but cannot
import. The trick here is to use the filters to only export the attributes
that are importable. For your existing output, you can either edit it in
notepad to remove the offending attributes or scrap it and start again with
a fresh export.
The next question of course is what attributes can't be imported. I'm
looking on TechNet for a KB but can't find one yet, if I do I'll post it.

thanks, but i had no problem with an import in w2k ldifde. well not with
that file, but the same way. export from ad with ldifde deleted the 2nd line
(changetype: add), import was ok.

oliver

 

[Oliver Rieder]

problem is solved!