This message is commonly returned when attempting to modify
the objectClass attribute in a manner inconsistent with the
LDAP/X.500 information model. In particular, it commonly
occurs when one tries to change the structure of the object
from one class to another, for instance, trying to change
an 'apple' into a 'pear' or a 'fruit' into a 'pear'. Such
changes are disallowed by the slapd(8) in accordance with
LDAP and X.500 restrictions.
To overcome this restriction in 2.3 (and prior releases), one
must re-create the object with the desired new structural
object class (e.g., delete old object then add new object). In
2.4, support for a new control will (hopefully) be introduced
to allow the (authorized) user to request this (and various
other model restrictions) be temporarily relaxed.
|