Mark Henning wrote: > I am in the process of building an LDAP schema which has a number of > attributes which will be constrained to specific values. I have run into > an issue where slaptest will build the ldif file without syntax errors, but > when slapd starts up it can't find the X-ENUM syntax defined in the same > file. This X-ENUM stuff is probably a proprietary extension of another LDAP server implementation. With OpenLDAP you have to use slapo-constraint(5) for that. So your example ldapsyntax ( 1.3.6.1.4.1.39235.2.3.500 DESC 'Test Enumeration' X-ENUM ( 'Yes' 'No' 'Maybe' ) ) gets turned into an attribute constraint like this: constraint_attribute 1.3.6.1.4.1.39235.2.3.500 regex "^(Yes|No|Maybe)$" slapo-constraint is a bit more powerful and you can achieve things like dynamically searched enums or rules for composing attributes with set-based constraints. You should really carefully read slapo-constraint(5). Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature