[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
problems adding an entry
- To: OpenLDAP-Software@OpenLDAP.org
- Subject: problems adding an entry
- From: Quinn Coldiron <qcoldir@nmhs.org>
- Date: 28 Oct 2002 11:05:16 -0600
- In-reply-to: <200210281702.g9SH2ofN002436@galois.openldap.org>
- References: <200210281702.g9SH2ofN002436@galois.openldap.org>
I just got a 2.0.27 server running on my RedHat 7.3 laptop for testing.
Things look good so far, except when adding people to my people group.
I can't have an email address entry. When I do I get this error:
[qcoldir@qcoldir ldap]$ ./addentry test.ldif
Enter LDAP Password:
adding new entry "cn=Alex Coldiron, ou=people, dc=nmhs, dc=org"
ldap_add: Object class violation
additional info: attribute 'mail' not allowed
The sample ldif file is here:
dn: cn=Alex Coldiron, ou=people, dc=nmhs, dc=org
cn: Alex Coldiron
sn: Coldiron
objectclass: top
objectclass: person
objectclass: posixAccount
objectclass: shadowAccount
uid:acoldir
userpassword:{crypt}$1$ss2ii(0$gbs*do&@=)eksd
uidnumber:750
gidnumber:500
loginShell:/bin/sh
homeDirectory: /home/acoldir
mail:aqcoldir@nmhs.org
shadowLastChange:10877
shadowMin: 0
shadowMax: 999999
shadowWarning: 7
shadowInactive: -1
shadowExpire: -1
shadowFlag: 0
If I take out the mail:aqcoldir@nmhs.org line I'm OK.
My slapd.conf file is here:
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27
20:00:31 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/nis.schema
#include /usr/local/etc/openldap/schema/openldap.schema
include /usr/local/etc/openldap/schema/corba.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/java.schema
include /usr/local/etc/openldap/schema/krb5-kdc.schema
include /usr/local/etc/openldap/schema/misc.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /usr/local/var/slapd.pid
argsfile /usr/local/var/slapd.args
# Load dynamic backend modules:
# modulepath /usr/local/libexec/openldap
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
#
# Sample Access Control
# Allow read access of root DSE
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
#
#access to dn="" by * read
#access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default is:
# Allow read by all
#
# rootdn can always write!
#######################################################################
# ldbm database definitions
#######################################################################
database ldbm
suffix "dc=nmhs,dc=org"
#suffix "o=My Organization Name,c=US"
rootdn "cn=manager,dc=nmhs,dc=org"
#rootdn "cn=Manager,o=My Organization Name,c=US"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw not_the _real_password
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory /usr/local/var/openldap-ldbm
# Indices to maintain
index objectClass eq
Any ideas on why I can't have the email address in the entry?
Thanks,
Quinn