On May 14 at 7:11pm, David Smith wrote:
> Bart, OpenLDAP correctly refuses. However, when I do an ldap_modify or
> an ldap_add that would create duplicate cn entries, OpenLDAP _does_
> perform the modification. Is this correct behavior? Is there a rule with
> regard to duplicate entries like this?
OpenLDAP does NOT ensure that no two entries in have duplicate cn
attributes. The only guarantee is that no two entries will have the
same DN. The following LDIF is perfectly legal and will be accepted by
OpenLDAP:
dn: cn=John Doe,ou=People,dc=example,dc=com
objectClass: person
cn: John Doe
cn: joe
sn: Doe
dn: cn=Johnny Doe,ou=People,dc=example,dc=com
objectClass: person
cn: Johnny Doe
cn: joe
sn: Doe
--
Frank Swasey | http://www.uvm.edu/~fcs
Systems Programmer | Always remember: You are UNIQUE,
University of Vermont | just like everyone else.
=== God Bless Us All ===