Re: Attribute not allowed when adding mail to person

[David Young <dyoung@NetToNetTech.com>]

You can only uses attributes that are defined in the objectclass(es) you
include in the LDIF.

http://www.OpenLDAP.org/faq/data/cache/220.html gives a list of links to web
sites where you can lookup schema info.

Specifically, if you look at
http://www.hklc.com/ldapschema/objectclass.html?objectclass=person you will
see that "person" only allows the attributes sn, cn, userPassword,
telephoneNumber, seeAlso, description. You will also see that it must have
"objectclass: top" in it.

To add other attributes, you must find objeclasses that support those
attrbutes. Common ones to includes for a people entry are:

objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson

See the example at 
http://www.hklc.com/ldapschema/objectclass.html?objectclass=inetOrgPerson

> From: "Brian S. Craigie" <Brian.Craigie@necs.demon.co.uk>
> Organization: NEC Semiconductors (UK) Ltd
> Reply-To: Brian.Craigie@necs.demon.co.uk
> Date: Mon, 12 Feb 2001 10:18:35 +0000
> To: openldap-software@OpenLDAP.org
> Subject: Attribute not allowed when adding mail to person
> 
> I want to add in a user using the following ldif file:-
> 
> # Brian
> dn: cn=Brian Craigie,dc=necs.demon.co,dc=uk
> objectClass: person
> cn: Brian S. Craigie
> sn: craigie
> mail: Brian.Craigie@necs.demon.co.uk
> title: Unix Systems Administrator
> uid: brianc