Re: Object Class Violation

Neil Schneider wrote:

> 
> I'm missing something. It would be great if all the required fields
> were marked, since I always seem to have difficulty getting diradmin
> to work. I'm still get ObjectClass violations, when I try to create an
> account from scratch. Unchecking "Grant access to all computers in the
> network" solved the problem. So I conclude, if you "Grant access to
> all computers in the network" then DA trys to use both InetOrgPerson
> and account at the same time. They are both StructuralObjectClasses
> and therefore an error.

If you uncheck the "Grant access to all computers" box, the wizard 
brings up a dialog where you can enter allowed hostnames. DA will then 
try to add the account objectclass and host attribute to the user's 
entry, so that pam_ldap can enforce access control. For now, just leave 
the box checked and there should be no problem.




> Also the schema for samba is outdated, according to what I'm seeing.
> The smbHome attribute is deprecated in Samba3. The new attribute is
> "sambaHomePath". So it appears that DA is not compatible with samba3.

You are correct. DA 1.6x does not support Samba 3. Samba 3 support is in 
  DA 1.7 beta.



> Is there no way to add the capability to check against the schema
> chosen to make sure all the attributes DA expects are present, and
> then let the admin know?

This is possible. It's what I specified as the first patch which is 
required before any other patches are accepted. I hope somebody with 
more free time than I currently have can submit it.

  Fredrik, you seem to be interested in writing some patches. Can you 
patch the 1.7 trunk with Luke's RHEL4 schema, and remove the account 
objectclass? Also, do a schema query to check that the Luke's schema oc 
is present before enabling the possibility to uncheck the "Grant access 
to all computers" button? If you can do this thing, I will grant you 
commit priveleges to SVN. Add the Luke schema, and put some notes in the 
README file about it. Also, when the checkbox is greyed out, there 
should be some mention right there on the screen about where and how to 
add this schema...


BR,
--
mike