Yes, guess I will have to remove it through ldif with ldapmodify. Thanks a lot for the help Hallvard!
Angie On Tue, Feb 10, 2009 at 8:34 AM, Hallvard B Furuseth <[email protected]> wrote: > Angie Cao writes: >> Well, ldapbrowser doesn't accept the change if I removed the value and >> leave nothing in 'mail' attribute. > > Actually that error message comes from the server. Ldapbrowser accepts > it since it likely doesn't know the syntax of 'mail', and then the > server complains. > >> Here is the .ldif: >> >> dn: uid=angiecao,ou=People,dc=example,dc=com >> (....) >> mail: > > Yes, that says the mail attribute should exist but have an empty string > as value. The LDIF format for removing the 'mail' attribute is: > > dn: uid=angiecao,ou=People,dc=example,dc=com > changetype: modify > delete: mail > - > > At least that's how it's fed to ldapmodify. I don't know ldapbrowser: > maybe takes the new ldif, compares with the existing entry, and applies > the difference. If so you should just should just remove the 'mail:' > line from the ldif. > > -- > Hallvard > >
