[Date Prev][Date Next] [Chronological] [Thread] [Top]

user-defined ObjectClass has inappropriate SUPerior



I'm trying to do ACIs in my OpenLDAP v2.1.22 database, but
when trying to load the schema file, I get the above error.

Looking in 'cn=Subschema' (without trying to load the schema),
I see that the attribute is there:
----- s n i p -----
attributeTypes: ( 1.3.6.1.4.1.4203.666.1.5 NAME 'OpenLDAPaci' DESC 'OpenLDAP a
 ccess control information (experimental)' EQUALITY OpenLDAPaciMatch SYNTAX 1.
 3.6.1.4.1.4203.666.2.1 USAGE directoryOperation )
----- s n i p -----

But the OpenLDAPaciMatch equality isn't there...

I first thought that servers/slapd/schema_init.c wasn't
compiled with SLAPD_ACI_ENABLED, but it's defined in
include/portable.h:
----- s n i p -----
[tuzjfi.tty2]$ grep SLAPD_ACI_ENABLED include/portable.h
#define SLAPD_ACI_ENABLED 1
----- s n i p -----


The schema definition I'm trying to load looks like:
----- s n i p -----
objectclass ( 1.3.6.1.4.1.10755.1.2.1.6
        NAME 'OpenLDAPacl'
        DESC 'OpenLDAP access control information'
        SUP top STRUCTURAL
        MUST objectClass
        MAY  OpenLDAPaci )
----- s n i p -----

If I remove the MAY, it loads, so it must have something
to do with the attribute OpenLDAPaci...

Any ideas?