Bruce Becker's questions

I have an NFSv4 server (CentOS). I want to export a particular directory to two different machines (one CentOS and one Ubuntu), where users of the same uid and gid need read-write access to the mounted directory. The GID and UID are the on the clients are the same as on the server, but the user names are different.

When I try using gid=,uid= in the /etc/fstab I get mount.nfs: an incorrect mount option was specified. messages in /var/log/messages are

nfsidmap[12817]: nss_getpwnam: name 'apprepo' not found in domain 'sagrid.ac.za'

apprepo is the user name which owns the files on the server. sagrid.ac.za is of course the domain of our machines.

I have the ldif

dn: olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config
objectClass: top
objectClass: olcConfig
objectClass: olcOverlayConfig
objectClass: olcPPolicyConfig
olcOverlay: ppolicy
olcPPolicyDefault: cn=default,ou=policies,dc=local
olcPPolicyHashCleartext: TRUE

dn: olcOverlay=memberof,olcDatabase={1}hdb,cn=config
objectClass: top
objectClass: olcConfig
objectClass: olcOverlayConfig
objectClass: olcMemberOf
olcOverlay: {1}memberof
olcMemberOfMemberAD: uniqueMember
olcMemberOfGroupOC: groupOfUniqueNames
olcMemberOfRefInt: TRUE

which i'm trying to use to configure the ldap server with the following command :

ldapadd -Y EXTERNAL -H, ldapi:/// -f /tmp/overlays.ldif
The error I'm getting is:
SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
adding new entry "olcOverlay=ppolicy,olcDatabase={1}hdb,cn=config"
ldap_add: Invalid syntax (21)
additional info: objectClass: value #3 invalid per syntax

I suspect that it's due to an incorrect password, but I can't tell for sure. The hits I've had searching on the web have been for "value #2" or "value #1" - as a non ldap expert, I don't know if this makes any difference.

Thanks, Bruce