[Date Prev][Date Next]
Re: (ITS#3798) MAY is MUST ?
> when i try to add an entry to the ldap, i got : entry failed schema
> check: object class 'qmailUser' requires attribute 'sn'
> but the qmailUser is : objectclass ( 22.214.171.124.4.1.8868.3.1 NAME
> 'qmailUser' DESC 'qmail local mail recipient' SUP ( top $ person $
> organizationalPerson ) MAY ( qmailGID $ qmailUID $ qmaildomain $
> mailQuota $ mailMessageStore $ clearPassword $ uid $ name $ sn $ cn $
> mail $ gn) )
> the MAY indicates it's optional (i think so).
> any clue ?
Yes: "sn" is MUST in "person", which "qmailUser" is derived from.
According to <draft-ietf-ldapbis-models>, derived objectClasses may turn
MAY attributes into "MUST" attributes, but "MUST" attributes of ancestor
classes cannot be turned into "MAY" by a descendant class. So, as far
as I understand the specifications, the above objectClass definition for
"qmailUser" is malformed, i.e. "cn" and "sn" cannot be "MAY" since
they're already "MUST" in "person".
By no means this indicates a software issue with OpenLDAP, so this ITS
will be closed.
SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497