ran li writes:
>> A question regarding how to avoid object violation
>>
>> I need following objectclasses all together, but when I put
>> inetOrgPerson with account it will cause object violation.
>>
>> objectclass account
>> objectclass person
>> objectclass inetOrgPerson
>> objectclass organizaitionalPerson
>> objectclass posixaccount
>> objectclass shadowaccount
An LDAP entry may have only one structural object class chain, but
yours has two:
- inetOrgPerson subclass of organizaitionalPerson subclass of person
- account
The idea is that an LDAP entry describes some specific thing, the
structural object class says what kind of thing, and a person is not a
computer account. On the other hand, a person with internet contact
addresses at an organization (inetOrgPerson) is still a person.
The two other classes are 'auxiliary' and not 'structural' classes
(see their definitions in the schema - etc/openldap/schema/*.schema if
you use OpenLDAP), so they can be added independently.
In this case you can probably remove the account class and just
keep the person-classes and <posix/shadow>account. However,
there is one other way:
>> same when following objectclasses are all togeter,
>>
>> objectclass nisobject
>> objectclass automount
>>
>> or
>>
>> objectclass nismap
>> objectclass automountmap
I do not know the automount/automountmap classes, but in each case you
can create your own structural object class which is a subclass of all
the structural object classes you want your entries to have. Then
include that class in your LDAP entries. Something like
objectclass ( <oid> NAME 'nisAutomount'
DESC 'brief description of the class'
SUP ( nisObject $ automount ) STRUCTURAL )
To create object classes, you an OID (object identifier) arc.
See <http://www.openldap.org/faq/data/cache/391.html>.
However, it may be that your intended LDAP structure is badly designed
and it's better to keep NIS- and automount-info in separate objects,
or it my be that the automount-classes are badly designed and should
e.g. be auxiliary instead of structural.
--
Hallvard
For sale: Parachute. Never opened, used once, slightly stained.
---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the
SUBJECT of the message.
