(ITS#3941) Wrong posixGroup definition in nis.schema

[y-suzuki@anet.co.jp]

Full_Name: SUZUKI Yasuhiro
Version: 2.3.5
OS: Debian Sarge Linux
URL: 
Submission from: (NULL) (210.251.85.34)


posixGroup definition in nis.schema of OpenLDAP ver 2.3.5 seems wrong.

MigrationTools fails and puts a message below:
   adding new entry "cn=root,ou=Group,dc=xsp,dc=ss,dc=si,dc=anet,dc=co,dc=jp"
   ldap_add: Object class violation (65)
        additional info: no structural object class provided

I modified the nis.schema as below and MigrationTools successfully added the
DN:
foo@example:/usr/local/etc/openldap/schema$ diff -c nis.schema.org nis.schema
*** nis.schema.org      2005-08-10 06:04:09.000000000 +0900
--- nis.schema  2005-08-17 13:11:47.000000000 +0900
***************
*** 172,178 ****

  objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup'
        DESC 'Abstraction of a group of accounts'
!       SUP top AUXILIARY
        MUST ( cn $ gidNumber )
        MAY ( userPassword $ memberUid $ description ) )

--- 172,178 ----

  objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup'
        DESC 'Abstraction of a group of accounts'
!       SUP top STRUCTURAL
        MUST ( cn $ gidNumber )
        MAY ( userPassword $ memberUid $ description ) )

foo@example:/usr/local/etc/openldap/schema$

I'll show you original nis.schema file information.
foo@example:~/src/tmp/openldap-2.3.5/servers/slapd/schema$ ls -l nis.schema.org
-rw-r--r--  1 foo foo 7694 2005-08-10 06:04 nis.schema.org
foo@example:~/src/tmp/openldap-2.3.5/servers/slapd/schema$ md5sum
nis.schema.org
a1bb28e9306d4f089d861e7df6de5e01  nis.schema.org
foo@example:~/src/tmp/openldap-2.3.5/servers/slapd/schema$

The file is derived from an archive file I downloaded
and the checksum is
foo@example:~/src$ md5sum openldap-2.3.5.tgz
732b5ac8c638155f1f27196ac9e0b9e2  openldap-2.3.5.tgz
foo@example:~/src$