Re: newbie question

["Lon Tierney" <ltierney@mykungfuisthebest.net>]

I assume you are using something like LDAP Browser?


Sometimes the client (LDAP Browser in particular) causes issues due to the
order in which it applies items. I have found that some of the clients
don't allow things like changing object classes of existing objects, but
usually work when adding a new object.

I suggest attempting to perform the same addition with another tool, such
as ldapmodify and an LDIF. This will help you determine if you are having
a schema issue, or if you are having a client issue.

Also, if you can provide an error message that is more descriptive than
"error like mail not allowed", you may get better help. The more detailed
the better. You will get more detailed messages and debug info from
ldapmodify (in general) than most GUI-based clients.

-lon


> I am new to LDAP and am trying to figure out what I am doing wrong. I
> am using a java based browser/editor with a template listed below. When
> I fill it out I get error like mail not allowed but I have it listed in
> qmailuser ojectclass. What am I doing wrong? I have also provided a
> snipit of my schema file that I think is relevant.
>
>
> # name : CourierUser
> #
> # objectClass : top
> # objectClass : organizationalPerson
> # objectClass : CourierMailAccount
> # objectClass : qmailUser
> #
>
> PREFIX: ou
>
> REQUIRED ATTRIBUTES
>
> mail
> homeDirectory
> uidNumber
> gidNumber
> userPassword
> sn
> ----------------------------------------
> Snipit of my schema file
>
> objectclass ( 2.5.6.6 NAME 'person'
>        DESC 'RFC2256: a person'
>        SUP top STRUCTURAL
>        MUST ( sn $ cn )
>        MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) )
>
> objectclass ( 2.5.6.7 NAME 'organizationalPerson'
>        DESC 'RFC2256: an organizational person'
>        SUP person STRUCTURAL
>        MAY ( title $ x121Address $ registeredAddress $
>        destinationIndicator
> $
>                preferredDeliveryMethod $ telexNumber $
> teletexTerminalIdentifier $
>                telephoneNumber $ internationaliSDNNumber $
>                facsimileTelephoneNumber $ street $ postOfficeBox $
> postalCode $
>                postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l
>                ) )
>
> objectclass ( 1.3.6.1.4.1.7006.1.2.2.1 NAME 'qmailUser'
>        DESC 'QMail-LDAP User' SUP top AUXILIARY
>        MUST ( mail $ uid )
>        MAY ( mailMessageStore $ userPassword $
>              mailAlternateAddress $ qmailUID $ qmailGID $ mailQuota $
>              mailHost $ mailForwardingAddress $ deliveryProgramPath $
>              qmailDotMode $ deliveryMode $ mailReplyText $
>              accountStatus ) )
>
> objectclass ( 1.3.6.1.4.1.10018.1.2.1 NAME 'CourierMailAccount' SUP top
> AUXILIARY
>        DESC 'Mail account object as used by the Courier mail server'
>        MUST ( mail $ homeDirectory $ uidNumber $ gidNumber )
>        MAY ( mailbox $ uid $ cn $ gecos $ description $ loginShell $
>        quota
> $ userPassword $ clearPassword ) )
>
>
>
>
> Thank You,
> Russell Premont