[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: no structuralObjectClass operational attribute error



Resending my previous response (which didn't make the list due to moderation) 
without the offending text, so that others hopefully find this answer.

On Thursday 04 January 2007 23:14, Pierangelo Masarati wrote:
> Todd R Davis wrote:
> > I am setting up a new samba/openldap server. SLES 10 OS.  I am trying to
> > populate the database and receive an error.
> >
> > using command:
> >
> > ldapadd -x -h localhost -D "cn=Manager,dc=hrhtest2,dc=org" -f test3.ldif
> > -W
> >
> >
> > get error:
> >
> > adding new entry "cn=Domain Admins,ou=Groups,dc=hrhtest2,dc=org"
> > ldap_add: Internal (implementation specific) error (80)
> >         additional info: no structuralObjectClass operational attribute
> >
> >
> >
> > test3.ldif:
> >
> > dn: cn=Domain Admins,ou=Groups,dc=hrhtest2,dc=org
> > objectClass: posixGroup
> > objectClass: sambaGroupMapping
> > gidNumber: 512
> > cn: Domain Admins
> > memberUid: Administrator
> > description: Netbios Domain Administrators
> > sambaSID: S-1-5-21-924382055-1192225092-1506617496-512
> > sambaGroupType: 2
> > displayName: Domain Admins
>
> <http://www.openldap.org/faq/data/cache/1385.html>


While the error is described there, it may be worthwhile noting that this 
specific problem is reported quite often by people running SUSE and trying to 
ue smbldap-tools or similar.

This is because SUSE uses rfc2307bis by default (where posixGroup is 
AUXILIARY), but most tools for samba+ldap assume rfc2307 (where posixGroup is 
STRUCTURAL).

The easiest fix here is to change the rfc2307bis.schema to nis.schema in 
slapd.conf, restart slapd, and all should work (IIRC from the various times I 
have helped people on #ldap resolve this).

Regards,
Buchan

-- 
Buchan Milne
ISP Systems Specialist - Monitoring/Authentication Team Leader
B.Eng,RHCE(803004789010797),LPIC-2(LPI000074592)

Attachment: pgpMBbzUtapsb.pgp
Description: PGP signature