[Date Prev][Date Next]
Re: objectclass question
I have similar problems with porting LDAP databases from 2.0.x
to 2.1.x. Since the schema check is realy armed in version 2.1.x,
adding/porting of entries can only be solved by trial
and error. It is quite difficult to find any documentation about these "new"
Do you know about a RFC or documentation paper?
Peter Marschall wrote:
On Friday 03 October 2003 12:14, Michal Gubik wrote:
My question is regarding object class. I have made already several users
on ldap but I need to add host atribute that is in account objectclass
but when I tri to add account objectclass to that user I get error
saying ldap_modify: Cannot modify object class (69)
additional info: Structural object class modification from
'InetOrgPerson' to 'account' not allowed
my ldif looks like this:
dn: uid=mgubik, ou=people, o=coprosys,dc=cd
and I try to add it by ldapmodify. Thanks for any help.
It is a restriction of OpenLDAP starting from 2.1.x to not allow to change the
STRUCTURAL objectclass of an entry.
IIRC the reasons for this restriction were that the LDAP data model requires
To change the STRUCTURAL objectclasses of an object you need to delete and
re-add it to the directory.
Please consider the fact that OpenLDAP enforces the "one objectclass chain"
rule. You may need to create a private objectclass that has the account
objectclass and your user's objectclass as SUPerior objectclasses.
IMHO forbidding the change of the strcutural objectclass completetly is too
rigid. I can understand that it is a bad idea to delete a STRUCTURAL
objectclass, but I cannoit see why adding an objectclass that has the
current structural objectclass as SUPerior might hurt anything.
-- Andreas Gabriel
@AG Neurophysik ,Renthof 7, 35032 Marburg TEL/FAX +49 +6421 28-25683/27034
@HRZ, Hans-Meerwein-Str. , 35032 Marburg TEL/FAX +49 +6421 28-23560/26994
------------------ Philipps-Universitaet Marburg -------------------------