Howard Chu wrote: > Use the correct attributeType - "olcObjectClasses" - pay attention to what > you're doing, this should have been obvious. > > Don't use replace, that will delete all the values. Yepp. > Use delete/add of the specific value. I'd recommend to use a decent LDAP client. ;-) In this case web2ldap would generate a minimal change because 'olcObjectClasses' has an EQUALITY matching rule and more than 3 attribute values. Old values are explicitly deleted and only new values are added then. The LDIF of the modification will be displayed for e.g. generating LDIF modification scripts in a test staging environment. Ciao, Michael.
Description: S/MIME Cryptographic Signature