[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Object class violation (65): inetOrgPerson/posixGroup
Kevin wrote:
objectclass: inetOrgPerson
objectclass: krb5Principal
objectclass: krb5KDCEntry
objectclass: posixAccount
objectclass: posixGroup
ldap_add: Object class violation (65)
additional info: invalid structural object
class chain (inetOrgPerson/posixGroup)
That *is* the problem. A person cannot also be a group; it's
either the one or the other. You have to choose. If you want
to have Redhat-style user=group, you are in for a lot of
hassle: you have to create the groups separately.
Only this morning I wrote a primer to these things in as simple
terms as I could. It might help you:
http://www.openldap.org/lists/openldap-software/200403/msg00101.html
Z