[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: How to say not to use a particular objectClass for a dn


Can you please suggest some documentation to learn LDAP basics.
I am struggling with understanding even what a DN is?

I am not able to add entries like:
# Add Org Unit Actors
dn: ou=Sales,o=Example Corporation,dc=my-domain,dc=com
objectClass: dcObject
objectClass: organization
objectClass: organizationalUnit
dc: my-domain
o: Example Corporation
ou: Sales

I am getting Structural Object Class Chain Errors.
So, what is the kind of Hierarchial Structure we can build using openLDAP?
Are there restrictions in terms of creating DN also?

Please suggest some documentation links where i can learn the basics clearly.

Harish Pathangay

> Date: Sun, 10 Nov 2013 11:55:52 +0100
> From: michael@stroeder.com
> To: harishpathangay@outlook.com; openldap-technical@openldap.org
> Subject: Re: How to say not to use a particular objectClass for a dn
> Harishkumar Pathangay wrote:
> > Hi,How to say not to use a particular objectClass for a dn.
> > For example,harish@openSUSE:~> ldapsearch -x -b 'dc=my-domain,dc=com' '(objectclass=*)' # extended LDIF## LDAPv3# base <dc=my-domain,dc=com> with scope subtree# filter: (objectclass=*)# requesting: ALL#
> > # my-domain.comdn: dc=my-domain,dc=comobjectClass: dcObjectobjectClass: organizationdc: my-domaino: Example Corporation
> > # Manager, my-domain.comdn: cn=Manager,dc=my-domain,dc=comobjectClass: organizationalRolecn: Managerdescription: Directory Manager
> > # search resultsearch: 2result: 0 Success
> > Here, we see that dn: dc=my-domain,dc=com uses objectClass: organizationI want to say not to use objectClass: organization.
> > How to do this?
> You probably want to have DIT structure rules which are (unfortunately) not
> implemented by OpenLDAP yet.
> It's possible to work-around this with ACLs:
> http://www.openldap.org/faq/data/cache/1474.html
> A schema-aware client cannot detect the custom ACLs though.
> Ciao, Michael.