Re: Setting LDAP_SERVER_PERMISSIVE_MODIFY_OID to allow empty values in AD

On Dec 4, 2008, at 4:25 AM, Alexander Farber wrote:
> On Wed, Dec 3, 2008 at 6:43 PM, Graham Barr <[email protected]> wrote:
>> On Dec 2, 2008, at 8:20 AM, A. Farber wrote:
>>> I have a script which reads phone numbers from a CSV file
>>> and stores them in Active Directory (w2k3), so that you can
>>> find a user phone number in the address book of Exchange.
>>>
>>> After some searching I've found a suggestion to set
>>> LDAP_SERVER_PERMISSIVE_MODIFY_OID so that
>>> AD does not prevent me from emptying empty values:
>>> http://msdn.microsoft.com/en-us/library/aa366984.aspx
>
>> Try
>> use constant LDAP_SERVER_PERMISSIVE_MODIFY_OID   
>> '1.2.840.113556.1.4.1413';
>>
>> $mod = $ldap->modify($entry,
>> control => [ { type => LDAP_SERVER_PERMISSIVE_MODIFY_OID } ],
>> replace => {
>>   homePhone => $href->{HOME},
>>   mobile => $href->{MOBILE},
>>   facsimileTelephoneNumber => $href->{FAX}
>> }
>> );
>>
>
> Thank you, but unfortunately I still get:
>
> Failed to modify user: 00000057: LdapErr: DSID-0C090A85, comment:
> Error in attribute conversion operation, data 0, vece at
> ./fix-phones.pl line 78, <> line 374.

What do you see on stderr if you turn on debug, just before you call  
modify,
with $ldap->debug(15);

Graham.