the ldif file is [EMAIL PROTECTED] openldap]# cat testdavid.ldif dc: idc dn: cn=David,dc=idc,dc=com objectclass: organizationalRole userPassword: David cn: David I am getting the following error adding new entry "cn=David,dc=idc,dc=com" ldap_add: Object class violation additional info: attribute 'userPassword' not allowed ldif_record() = 65
userPassword isn't an attribute allowed in organizationalRole. If you want to associate a password with a role add the simpleSecurityObject auxilliary objectclass. objectclass ( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject' DESC 'RFC1274: simple security object' SUP top AUXILIARY MUST userPassword ) Should be in the "core" schema. --- You are currently subscribed to ldap@umich.edu as: [EMAIL PROTECTED] To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the SUBJECT of the message.