Roger Thomas(sniper@home.net.my) on 2006.12.26 16:03:39 +0000:
> I have been using the old openldap 2.0.25 and have no problem with this ldif:
> objectClass: top
> objectClass: person
> objectClass: inetOrgPerson
> objectClass: organizationalPerson
> objectClass: country
> ldap_add: Object class violation (65)
> additional info: invalid structural object class chain
> (inetOrgPerson/country)
country is STRUCTURAL and SUP top.
person is STRUCTURAL and SUP top.
That does not work: they are on different branches in the hierachy of
objectclasses.
For some explainaitions see
http://www.oreillynet.com/pub/a/sysadmin/2006/11/09/demystifying-ldap-data.html?page=last&x-showcontent=text
Some LDAP-docs say, that an entry may be of only _one_ structural
objectclass. This is not quite true: the objectclasses have to be children
(SUP...) of each other. And using 'country' violates this.
/B.
--
Sebastian Benoit <benoit-lists@fb12.de>
pgpKMrYccSTTu.pgp
Description: PGP signature
|