|
> From: bgmilne@staff.telkomsa.net > To: openldap-technical@openldap.org > Subject: Re: Adding rfc schema clashes > Date: Tue, 13 Jul 2010 15:47:31 +0100 > CC: stuart_cherrington@hotmail.co.uk > > On Tuesday, 13 July 2010 09:53:39 Stuart Cherrington wrote: > > Hi, > > > > Think I fixed this one myself, I've replaced the nis.schema with > > rfc2307bis.schema as it contains everything and more that nis.schema does. > > But, not the same ... and you should check that all your clients support > rfc2307bis (e.g., groupOfNames groups with DN-valued member attributes, > instead of posixGroup-only groups with username-valued memberUid attributes). Not sure how I check what Solaris clients need ion the LDAP server end, will troll through google. I 'was' using the nis.schema, but then found that I couldn't bind the ldap on my SOlaris clients to the openldap server as the nisDomainObject was a missing objecttype. When I found this in rfc2307bis I had to replace nis.schema with it and I found I couldn't use both. Not sure if I'm 'allowed' to do this but my initial problem was copying a posixGroup, the posixGroup def in rfc2307bis.schema lists the objecttype as 'AUXILIARY' and no 'cn' is MAY/MUST optioned. so I added 'cn' to the MAY section and changed the objectclass to 'STRUCTURAL', can now now copy posixGroups without errors. Please let me know if I'm breaking anything. > > [...] > > > Hi, > > > > Running OpenLDAP 2.4 on RHEL 5. > > > > In order for my SOlaris 10 clients to start using the OpenLDAP service I > > need the objectclass 'nisDomainObject' to be declared. I found this > > objecttype in the 'rfc2307bis.schema' file so I've added it into the > > slapd.conf and now LDAP fails to restart with > > > > /usr/share/openldap2.4/schema/nis.schema: line 53 attributetype: Duplicate > > attributeType: "1.3.6.1.1.1.1.2" slaptest2.4: bad configuration file! > > Your other alternative is to just copy the nisDomainObject and related > attributes to a separate schema file. > > > I did a quick check the and "1.3.6.1.1.1.1.2" is declared in the nis.schema > > for the gecos attributetype. > > > > Can I alter the number within the rfc schema? > > That wouldn't help ... > > Regards, > Buchan Get a free e-mail account with Hotmail. Sign-up now. |