[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Object class violation (65): inetOrgPerson/posixGroup

Kevin wrote:

objectclass: inetOrgPerson
objectclass: krb5Principal
objectclass: krb5KDCEntry
objectclass: posixAccount
objectclass: posixGroup

ldap_add: Object class violation (65)
additional info: invalid structural object class chain (inetOrgPerson/posixGroup)

That *is* the problem. A person cannot also be a group; it's either the one or the other. You have to choose. If you want to have Redhat-style user=group, you are in for a lot of hassle: you have to create the groups separately.

Only this morning I wrote a primer to these things in as simple
terms as I could. It might help you: