There is no such thing as "modify" on a multivalued attribute. As mentioned by Francis, you will have to delete the value you want to change and add a new one in place of it. The real warning is that you never really want to use the changetype: replace on a multi-valued attribute. This is because you will essentially be deleting-all existing value and replacing it with the new value you are adding. Most often than not, this is not what you want to do.
-Jerome On Thu, Apr 25, 2013 at 9:04 AM, Francis Swasey <frank.swa...@uvm.edu>wrote: > On Apr 25, 2013, at 11:57 AM, Brian Gaber <brian.ga...@ssc-spc.gc.ca> > wrote: > > > I have a LDAP object that contains an attribute SFTrule that can have > multiple values. How do I change just one of the SFTrule attribute values? > > > In pure ldif: > > dn: existing dn > changetype: modify > delete: SFTrule > SFTrule: old value > - > add: SFTrule > SFTrule: new value > - -- ~Jerome