Thanks for your help Michael! John D. Borresen (Dave) Ph: (781) 981-1609 Email: john.borresen@ll.mit.edu -----Original Message----- From: Michael Ströder [mailto:michael@stroeder.com] Sent: Friday, December 18, 2015 2:56 PM To: Borresen, John - 0444 - MITLL; openldap-technical@openldap.org Subject: Re: Attribute pwdPolicySubentry Borresen, John - 0444 - MITLL wrote: > Interesting! I was able to add it via command-line with ldapadd. But, when > viewing it in Apache Directory Studio, it still didn't show up -- that is > until I enabled Operational Attributes. Attribute 'pwdPolicySubentry' is somewhat special because it's not referenced by any object class. You can simply add it to any entry. Apache Directory Studio is schema-aware and likely it implements a client-side schema check which failed. Although my web2ldap has also full schema support it deliberately does not implement client-side schema checks for this very reason (guiding instead of enforcing). BTW: That's why I asked in my first response: "Which component does produce this error message?" Ciao, Michael.
Attachment:
smime.p7s
Description: S/MIME cryptographic signature