Re: invalid chain posixGroup/groupOfNames

"Manuel Amador (Rudd-O)" <[email protected]> writes:

> posixGroup and groupOfNames was used so DA can maintain on a single
> entry group status information for both unix groups and LDAP groups.
>
> OL 2.1 changed that.  There has been no solution to the change.

groupONames is a STRUCTURAL object class and referenced in
core.schema, posixGroup is a STRUCTURAL object class as well and
referenced in nis.schema.
RFC 2252,4.4 requires that each entry belongs to one structural object
class, (not 2 or more).
So it is not OpenLDAP that changed anything, but OpenLDAP is more
protocol compliant.
A client must be designed to follow protocol requirements. Therefor it
is the duty of DA developers to design a product that is in accordance
at least with the core specs.
By the way, it would be worthwhile to read
draft-ietf-ldapbis-roadmap. draft-ietf-ldapbis-protocol and
draft-ietf-ldapbis-models.

-Dieter

>> > when i create a group diradmin replay the message: object class violation
>> > in my log of ldap i get:
>> > invalid structural object class chain (posixGroup/groupOfNames)
>> > 
>> > whats wrong??? why can i not create the objectclass posixGroup and at the same time groupOfNames??? 
>> 
>> I think OpenLDAP 2.1 is enforcing schema structure validation that 
>> OpenLDAP 2.0 did not ...
>> 
>> and why diradmin try it????
>> 
>> I think it should not have done!
>> 
>> 
>> 
>> -------------------------------------------------------
>> This SF.Net email sponsored by Black Hat Briefings & Training.
>> Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
>> digital self defense, top technical experts, no vendor pitches, 
>> unmatched networking opportunities. Visit www.blackhat.com
>> _______________________________________________
>> Directoryadmin-list mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/directoryadmin-list

-- 
Dieter Klünter | Systemberatung
Tel.: +49.40.64861967
Fax : +49.40.64891521
http://www.avci.de



-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com