schemacheck

[Verschraegen Luc <Luc.Verschraegen@rug.ac.be>]

Hi,

 Got no reply(s) on the next questions, so this is a second try,


Solaris 2.6
OpenLDAP 1.2

 Is 'schemacheck on' working ??  (see <<)

 As you can see below from this simple example, there's no complaint about
the fact that 'nickname' is not required or allowed, 

 Missing required attributes produce a expectable: 
     ldap_add: Object class violation

 Is it possible to check for the fact some objectclasses do not exist in
the schema, e.g. 'blabla' and 'brol', since adding those objectclass
attributes seems not to end up in some kind of violation? 


-------------------------------------------------------------------------------
 Luc Verschraegen                                      Phone: +32-(0)9-2644732
 E-mail: Luc.Verschraegen@rug.ac.be                      Fax: +32-(0)9-2644994
-------------------------------------------------------------------------------



# ---------------------------------------------------------------- #
slapd.conf:

schemacheck     on

objectclass top
 requires
  objectClass

objectclass organization
 requires
  objectClass,
  o

objectclass person
 requires
  objectClass,
  cn,
  sn

#######################################################################
# ldbm database definitions
#######################################################################

database        ldbm
suffix          "o=rug.ac.be, c=be"
directory       /var/tmp/ldap
rootdn          "cn=root, o=rug.ac.be, c=be"
rootpw          blabla



# ---------------------------------------------------------------- #
input-file:

o=rug.ac.be, c=be
o=rug

cn=root, o=rug.ac.be, c=be
cn=root
sn=root
objectclass=person

cn=llll, o=rug.ac.be, c=be
cn=Verschraegen Luc
cn=Luc
nickname=Luc                               <<
sn=Verschraegen
objectclass=blabla                         <<
objectclass=brol                           <<



# ---------------------------------------------------------------- #
ldapadd:

ldapadd -D "cn=root, o=rug.ac.be, c=be" -w blabla -f ~/ldap/ldap.add 

adding new entry o=rug.ac.be, c=be

adding new entry cn=root, o=rug.ac.be, c=be

adding new entry cn=llll, o=rug.ac.be, c=be


# ---------------------------------------------------------------- #
ldapsearch:

ldapsearch -b 'o=rug.ac.be, c=be' 'objectclass=*'

cn=root, o=rug.ac.be, c=be
cn=root
sn=root
objectclass=person

cn=llll, o=rug.ac.be, c=be
cn=Verschraegen Luc
cn=Luc
nickname=Luc
sn=Verschraegen
objectclass=blabla
objectclass=brol