[Date Prev][Date Next] [Chronological] [Thread] [Top]

Change of structural objectclasses illegal?



Greetings; I'm having a problem making some modifications to my LDAP server
which may either be an error in my thinking, or an error in the OpenLDAP
enforcement of schema restrictions.

I'm running 2.1.15 on AIX.

There are certain statii people might attain in our directory such that we
want them to be "not there".  We've implemented this by inserting an object of
a locally defined class ('reserved') with an identical DN.  

When this unperson becomes a person, we'd like them to change from 

objectclass: reserved

to 

objectclass: person
objectclass: inetOrgPerson
[....]
objectclass: uflEduPerson

I understand that it is illegal for a given object to have two STRUCTURAL
classes that are not part of the same chain; but I'm not trying to do that,
I'm trying to replace one chain with another chain (and incidentally replace
almost all of the attributes too) which by my reading should be legal.

Am I walking the path of error?  

Should I supply more detailed example? 

- Allen S. Rout