Angie Cao writes: > Well, ldapbrowser doesn't accept the change if I removed the value and > leave nothing in 'mail' attribute.
Actually that error message comes from the server. Ldapbrowser accepts it since it likely doesn't know the syntax of 'mail', and then the server complains. > Here is the .ldif: > > dn: uid=angiecao,ou=People,dc=example,dc=com > (....) > mail: Yes, that says the mail attribute should exist but have an empty string as value. The LDIF format for removing the 'mail' attribute is: dn: uid=angiecao,ou=People,dc=example,dc=com changetype: modify delete: mail - At least that's how it's fed to ldapmodify. I don't know ldapbrowser: maybe takes the new ldif, compares with the existing entry, and applies the difference. If so you should just should just remove the 'mail:' line from the ldif. -- Hallvard
