[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Can't add attribute (error 65)
Using the following slapd configuration, I can't add an attribute value to
an existing user:
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/ppolicy.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /usr/local/var/run/slapd.pid
argsfile /usr/local/var/run/slapd.args
TLSCipherSuite HIGH:MEDIUM
TLSCertificateFile /usr/local/etc/openldap/slapd-cert.pem
TLSCertificateKeyFile /usr/local/etc/openldap/slapd-key.pem
access to attrs=userPassword by * auth
access to * by * read
#######################################################################
# BDB database definitions
#######################################################################
database bdb
suffix "dc=psccos,dc=com"
rootdn "cn=Manager,dc=psccos,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw xxxxxxxx
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /usr/local/var/openldap-data
# Indices to maintain
index objectClass eq
Below you can see the ldapmodify command that fails, and below that, the
file that contains the modifications:
$ sudo ldapmodify -w cowabunga -D "cn=Manager,dc=psccos,dc=com" -f
/home/oreilly/mod.ldif
modifying entry "cn=Renee Walker,ou=people,dc=psccos,dc=com"
ldap_modify: Object class violation (65)
additional info: attribute 'pwdInHistory' not allowed
$ cat /home/oreilly/mod.ldif
dn: cn=Renee Walker,ou=people,dc=psccos,dc=com
changetype: modify
add: pwdInHistory
pwdInHistory: 6
$
Any idea why this behavior occurs?
------
+-------------------------------+----------------------------------------+
| Dan O'Reilly | "There are 10 types of people in this |
| Principal Engineer | world: those who understand binary |
| Process Software | and those who don't." |
| http://www.process.com | |
+-------------------------------+----------------------------------------+