Re: Writing to cn=Subschema

[Michael Ströder <michael@stroeder.com>]

Adam Pordzik wrote:
> 
> 
>>
>>> $ ldapmodify -x -D "cn=Manager,o=Example" -w secret
>>> dn: cn=Subschema
>>> add: objectClasses
>>> objectClasses: ( 1.3.6.1.4.1.21924.99.1 NAME 'fooObjectClass'
>>>  DESC 'Boo' SUP top STRUCTURAL MUST ( cn $ objectclass ) )
>>>
>>> modifying entry "cn=Subschema"
>>> ldap_modify: Invalid syntax (21)
>>>         additional info: objectClasses: value #0 invalid per syntax
>>>
>> It's objectClass, not objectClasses, last time I read a schema.
> 
> Attribute objectClasses for reading, but objectClass for writing??

Nope. AFAIK directly tweaking the sub schema sub entry is not possible
with OpenLDAP.

> I really want to change cn=Subschema, not cn=Schema,cn=config

AFAIK the new back-config is the only way to re-configure a running
OpenLDAP slapd.

Ciao, Michael.