Re: More information on the directory_administrator issue

I found that I can fix the problem by creating a new user via the ldapadd 
and an ldif.  Have objectclass posixAccount and objectclass inetOrgPerson 
and in that case I am able to modify that user.  It seems that I need to 
modify my ldap so that my posixAccount entries are also included with 
objectclass inetOrgPerson.  Or I can possibly turn the schemacheck off. 

Is there a simple way to modify my ldap entries so that they are part of 
objectclass inetOrgPerson?  I have been trying with ldapmodify:

dn: .....
changetype: modify
add: objectclass
objectclass: inetOrgPerson
add:
sn: name

This returns the error:

Undefined attribute type (17)
        additional info: add: attribute type undefined

Eric Sammons





Eric Sandall <[email protected]>
Sent by: [email protected]
01/15/2004 03:35 PM
Please respond to directoryadmin-list
 
        To:     [email protected]
        cc: 
        Subject:        Re: [Directoryadmin-list] More information on the 
directory_administrator issue

Quoting [email protected]:
> As previously stated I am having a problem when modifying entries in my 
> LDAP using Directory_Administrator, 1.1.9 - 1.5.1.  I have since looked 
at 
> the OpenLDAP logs, yes I know should have done this sooner... and found 
> the following:
> 
> "entry failed schema check:  structural object class modification from 
> 'account' to 'inetOrgPerson' not allowed."
> 
> In spending some time with google I found that as of OpenLDAP 2.1 
Changing 
> the STRUCTURAL objectclass of an entry is not allowed. 
> 
> So here is my question, what steps or process must I go through to 
resolve 
> this issue so that I can take full advantage of Directory_Administrator?

I believe in this lists' archives is the answer to that, but in short I 
believe
you have to add the 'inetorgperson' schema. Below is my schema list, which
doesn't have that problem:

schemacheck     on
  
  
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/misc.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/openldap.schema
include         /etc/openldap/schema/horde.schema

Or you can also try turning 'schemacheck' off.

-sandalle

-- 
PGP Key Fingerprint:  FCFF 26A1 BE21 08F4 BB91  FAED 1D7B 7D74 A8EF DD61
http://search.keyserver.net:11371/pks/lookup?op=get&search=0xA8EFDD61

-----BEGIN GEEK CODE BLOCK-----
Version: 3.12
GCS/E/IT$ d-- s++:+>: a-- C++(+++) BL++++VIS>$ P+(++) L+++ E-(---) W++ N+@ 
o?
K? w++++>-- O M-@ V-- PS+(+++) PE(-) Y++(+) PGP++(+) t+() 5++ X(+) R+(++)
tv(--)b++(+++) DI+@ D++(+++) G>+++ e>+++ h---(++) r++ y+
------END GEEK CODE BLOCK------

Eric Sandall                     |  Source Mage GNU/Linux Developer
[email protected]                  |  http://www.sourcemage.org/
http://eric.sandall.us/          |  SysAdmin @ Inst. Shock Physics @ WSU
http://counter.li.org/  #196285  |  http://www.shock.wsu.edu/

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Directoryadmin-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/directoryadmin-list