Re: Disable uniqueness for mail Attribute

2024-02-28 Thread Quanah Gibson-Mount




--On Wednesday, February 28, 2024 7:34 AM + CALDEIRA JAVIEL Sandro 
 wrote:



Hi,

I have a legacy ldap instance (openlda-2.4) which has in the same
redundant user info containing mail attribute among others (objectclass:
inetOrgPerson) in 2 different ous (objectclass: organizationalUnit). I
know it is a bad design for ldap users structure but I am not allowed to
change it in a short time. When I tried to migrate this ldap database to
openldap 2.6 I realize this is not possible anymore. I identified it is
just related to mail attribute because if I omit mail attribute or use a
different value for mail, then all data is imported properly.


Do you use the slapo-unique overlay?

The only uniqueness requirement on mail out of the box is that for any 
specific entry, the mail value must be unique.  There is no requirement 
*across* subtrees that it be unique unless the configuration loads and uses 
slapo-unique to do this.


If you have duplicate values for 'mail' within a given entry, then you need 
to fix that.


--Quanah


Disable uniqueness for mail Attribute

2024-02-28 Thread CALDEIRA JAVIEL Sandro
Hi,

I have a legacy ldap instance (openlda-2.4) which has in the same redundant
user info containing mail attribute among others (objectclass:
inetOrgPerson) in 2 different ous (objectclass: organizationalUnit). I know
it is a bad design for ldap users structure but I am not allowed to change
it in a short time. When I tried to migrate this ldap database to openldap
2.6 I realize this is not possible anymore. I identified it is just related
to mail attribute because if I omit mail attribute or use a different value
for mail, then all data is imported properly.

Error from phpldapadmin:

Attribute value would not be unique
This update has been or will be cancelled, it would result in an attribute
value not being unique. You might like to search the LDAP server for the
offending entry. (Search)
warnLDIF text import
Could not add object cn=*,ou=Users,ou=TRG01,dc=***,dc=*,dc=**
LDAP said:  Success
Error number:   0x00 (LDAP_SUCCESS)
Description:The operation completed successfully.



smime.p7s
Description: S/MIME cryptographic signature