[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: structural object class modification from X to Y not allowed

Buchan Milne wrote:

On Thursday 23 February 2006 09:33, Jehan PROCACCIA wrote:

Jon Roberts wrote:

Jehan PROCACCIA wrote:

I'am surprise that I cannot add or replace to an existing object a
new objectclass in the same hierarchie of class !?
Can I do that without deleting the object and recreate it from
scratch :-( ?.

AFAIK, no... not since the tighter schema checking that came with 2.1.
Back in 2003 I initiated an overlong thread on this list about how
OpenLDAP prevented me from extending person entries to use
organizationalperson by modifying the objectclass attribute. Since
then it's been "delete and readd" as you say.

Do you remember the subject of that thread, I would like to read it from
the archive.
The problem here is that the objeclass person and oranizationalPerson
are in the same structural Chain, futhermore,  it is exactly the sample
proposed on that subject in the openldap FAQ and it is supossed to be
possible to have both ; from
http://www.openldap.org/faq/data/cache/883.html "Thus, it is OK for an
objectClass attribute to contain /inetOrgPerson/, /organizationalPerson/,
and /person/ because they inherit one from another to form a single
superclass chain. That is, /inetOrgPerson/ SUPs /organizationPerson/ SUPs
I must admit that I'am lost, did I forgot something  ?

I repost my "bad(?)" experience:
Here's my sample object on which I want to add the objectclass
dn: sn=CITI,ou=departements,ou=information,dc=int-evry,dc=fr
objectClass: person
cn: Communication and Image
sn: CITI

$ ldapmodify -f /tmp/add-dept.ldif -h localhost -D
cn=admin,dc=int-evry,dc=fr -W -x
modifying entry "sn=CITI,ou=departements,ou=information,dc=int-evry,dc=fr"
ldap_modify: Cannot modify object class (69)
      additional info: structural object class modification from
'person' to 'organizationalPerson' not allowed

We (well, I) can't comment without seeing the contents of /tmp/add-dept.ldif ...

it was on the first mail of that thread, I copy it below :
my ldif file /tmp/add-dept.ldif:
dn: sn=CITI,ou=departements,ou=information,dc=int-evry,dc=fr
changetype: modify
add: objectClass
objectClass: organizationalPerson

but apperently from the last mail of Kurt is seems impossible ! I'am still in doubt though ... as I don't see how I could then slapadd my users entries (ldif) which do contains /inetOrgPerson/, /organizationalPerson/, and /person/ objecclass without error . Why using ldapmodify generate that error then ?