[NBLUG/talk] LDAP db export on Fedora Directory Server

[Mitch Patenaude]

I'm hoping that somebody with more LDAP experience than I can point me
in the right direction.

I'm trying to rebuild my company's somewhat broken LDAP
implementation.  I'm trying to build a slightly less broken
implementation in parallel with the broken one, and copy over the
data.   The old broken one is running Fedora directory server. The
problem I'm having now is exporting the data.

When I export the subtree using the Fedora GUI (fedora-idm-console),
it gives be a full dump, but when I try to extract some of the same
data using ldapsearch, the records are strangely truncated/corrupted.
The ldapsearch command looks like:

ldapsearch -LLL -x -D 'cn=admin_user,ou=people,dc=example,dc=com' -w
<admin_pass> -h <old_ldap_server> -b dc=example,dc=com uid=<user>

And the record I get back is missing some fields (always missing
userPassword) and sometimes I get a strange record looking like

cn:: =<a bunch of base64 encoded nonsense>

Can anybody explain what I'm doing wrong?

  -- Mitch