> From: firstname.lastname@example.org
> To: email@example.com
> Subject: Re: Adding rfc schema clashes
> Date: Tue, 13 Jul 2010 15:47:31 +0100
> CC: firstname.lastname@example.org
> On Tuesday, 13 July 2010 09:53:39 Stuart Cherrington wrote:
> > Hi,
> > Think I fixed this one myself, I've replaced the nis.schema with
> > rfc2307bis.schema as it contains everything and more that nis.schema does.
> But, not the same ... and you should check that all your clients support
> rfc2307bis (e.g., groupOfNames groups with DN-valued member attributes,
> instead of posixGroup-only groups with username-valued memberUid attributes).
Not sure how I check what Solaris clients need ion the LDAP server end, will troll through google. I 'was' using the nis.schema, but then found that I couldn't bind the ldap on my SOlaris clients to the openldap server as the nisDomainObject was a missing objecttype. When I found this in rfc2307bis I had to replace nis.schema with it and I found I couldn't use both.
Not sure if I'm 'allowed' to do this but my initial problem was copying a posixGroup, the posixGroup def in rfc2307bis.schema lists the objecttype as 'AUXILIARY' and no 'cn' is MAY/MUST optioned. so I added 'cn' to the MAY section and changed the objectclass to 'STRUCTURAL', can now now copy posixGroups without errors.
Please let me know if I'm breaking anything.
> > Hi,
> > Running OpenLDAP 2.4 on RHEL 5.
> > In order for my SOlaris 10 clients to start using the OpenLDAP service I
> > need the objectclass 'nisDomainObject' to be declared. I found this
> > objecttype in the 'rfc2307bis.schema' file so I've added it into the
> > slapd.conf and now LDAP fails to restart with
> > /usr/share/openldap2.4/schema/nis.schema: line 53 attributetype: Duplicate
> > attributeType: "18.104.22.168.22.214.171.124" slaptest2.4: bad configuration file!
> Your other alternative is to just copy the nisDomainObject and related
> attributes to a separate schema file.
> > I did a quick check the and "126.96.36.199.188.8.131.52" is declared in the nis.schema
> > for the gecos attributetype.
> > Can I alter the number within the rfc schema?
> That wouldn't help ...
Get a free e-mail account with Hotmail. Sign-up now.