Did someone try Heimdal with openldap-2.2.x as backend ?

[Harry Rüter <harry_rueter@gmx.de>]

Hi everybody,

i'm trying to use openldap-2.2.x as backend for
Heimdal 0.6 ....

I followed the instructions on the PADL-site ...
but ... the schema-file (krb5-kdc.schema) seems not to runn under
openladp 2.2.x ..

Here's what slapd says in the log :

---snipp---
<<< dnNormalize: <cn=subschema>
/usr/local/ldap-2.2/etc/openldap/schema/krb5-kdc.schema: line 97: AttributeType 
inappropriate matching rule: "generalizedTimeOrderingMatch"
slapd-master shutdown: freeing system resources.
slapd stopped.
---snipp---

Okay, there's something wrong with  thematching rule: 
"generalizedTimeOrderingMatch" , but, as i'm no expert with
schema-files, what is wrong ?

Here's my slapd.conf :
---snipp---
include		/usr/local/ldap-2.2/etc/openldap/schema/core.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/corba.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/cosine.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/dyngroup.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/inetorgperson.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/java.schema
#  Would like to include it
#include		/usr/local/ldap-2.2/etc/openldap/schema/krb5-kdc.schema
################################
include		/usr/local/ldap-2.2/etc/openldap/schema/misc.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/nis.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/openldap.schema
include		/usr/local/ldap-2.2/etc/openldap/schema/samba.schema

TLSCACertificateFile  /etc/certificates/cacert.pem
TLSCertificateFile    /etc/certificates/pentium200cert.pem
TLSCertificateKeyFile /etc/certificates/pentium200key.pem
TLSVerifyClient       try

pidfile		/usr/local/ldap-2.2/var/run/slapd.pid
argsfile	/usr/local/ldap-2.2/var/run/slapd.args

modulepath	/usr/local/ldap-2.2/libexec/openldap
moduleload	back_bdb.la
moduleload	back_monitor.la

database	bdb
suffix		"dc=hrnet,dc=de"
rootdn		"cn=ldapmanager,dc=hrnet,dc=de"
rootpw		secret
directory	/usr/local/ldap-2.2/var/openldap-data
index	objectClass	eq

database        monitor
suffix		"dc=monitor"
rootdn		"cn=ldapmanager,dc=monitor"
rootpw		secret

access to *
       by * read
---snipp---

Any ideas/hints ?

grets Harry