Re: ldap_modify: Server is unwilling to perform (53)

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

As noted in the FAQ answer:Violations related to the entry's attributes:  
Attribute not allowed  
A provided attribute is not allowed by the entry's object class(es). 
As discussing the general LDAP schema model is far beyond the
scope of this list (as its generally not specific to OpenLDAP
Software), I suggest you read up on the LDAP schema model
(any decent LDAP book should cover it) and, if you have
questions regarding it, direct them to a general LDAP list.

-- Kurt

At 01:42 PM 9/14/2006, haiyi1@cox.net wrote:
>Thank you Matt.  I opened core.schema, which is included in slapd.conf, and did find givenName (see below) attribute there.  But when I tried it again, I still got the same error.
>
>attributetype ( 2.5.4.42 NAME ( 'givenName' 'gn' )
>        DESC 'RFC2256: first name(s) for which the entity is known by'
>        SUP name )
>
>
>
>
>
>---- matthew sporleder <msporleder@gmail.com> wrote: 
>> On 9/14/06, haiyi1@cox.net <haiyi1@cox.net> wrote:
>> > Thank you Dieter.  I am able to add organization and organizationUnit now.  But when I tried to add a person using the following .ldif file, it gave me another error message.
>> >
>> >
>> > dn:uid=user1,ou=Employees,o=example.com,cn=Manager,dc=my-domain,dc=com
>> > objectclass:top
>> > objectclass:person
>> > objectclass:organizationalPerson
>> > cn:John Doe
>> > sn:Doe
>> > givenname:John
>> > uid:user1
>> > userpassword:password
>> > ou:Employees
>> > description:user1
>> >
>> >
>> > ldap_initialize( <DEFAULT> )
>> > add objectclass:
>> >         top
>> >         person
>> >         organizationalPerson
>> > add cn:
>> >         John Doe
>> > add sn:
>> >         Doe
>> > add givenname:
>> >         John
>> > add uid:
>> >         user1
>> > add userpassword:
>> >         password
>> > add ou:
>> >         Employees
>> > add description:
>> >         user1
>> > adding new entry "uid=user1,ou=Employees,o=example.com,cn=Manager,dc=my-domain,d
>> > c=com"
>> > modify complete
>> > ldap_add: Object class violation (65)
>> >         additional info: attribute 'givenName' not allowed
>> 
>> 
>> Check in the schema definition.  You'll find them in the etc directories.
>> 
>> _Matt
>> 
>> 
>> >
>> >
>> > Isn't givenName a regular (even though it is optional) attribute?  Why it is not allowed?
>> >
>> > Haiyi
>> >
>> > ---- Dieter Kluenter <dieter@dkluenter.de> wrote:
>> > > <haiyi1@cox.net> writes:
>> > >
>> > > > Hi All,
>> > > >