RE: How to replace account with inetOrgPerson?

["John Kane" <john.kane@prodeasystems.com>]

I had the same issue when I found I needed the mail attribute 'after the
fact'.  You can add the extensibleObject objectClass to the account,
then you should be able to add the email attr.

Thanks,
John

-----Original Message-----
From: openldap-technical-bounces@OpenLDAP.org
[mailto:openldap-technical-bounces@OpenLDAP.org] On Behalf Of Marco
Schirrmeister
Sent: Wednesday, September 07, 2011 7:44 AM
To: Mi
Cc: openldap-technical@openldap.org
Subject: Re: How to replace account with inetOrgPerson?


On Sep 7, 2011, at 2:26 PM, Mi wrote:

> I am trying to add the "inetOrgPerson" objectClass, but some users
already have the "account" objectClass.
> 
> After a long search, I found that you cannot have both. So I am trying
to remove "account", and add "inetOrgPerson". But I cannot do that
either. I just get the following error :
> 
>    err=69 text=structural object class modification from 'account' to
'inetOrgPerson' not allowed
> 
> If I just try to remove "account", I get
> 
>    entry failed schema check: no structural object class provided
> 
> So, how can I add "inetOrgPerson" and remove "account" ?

The only way I know is you export the entry, modify the ldif and
reimport.
I just did that for all our groups, because we extended the schema and
wanted that our own objectClass has sup of groupOfUniqueNames.

> 
> Also, I notice that I don't have "account" listed under dn:
cn=schema,cn=config. What I have is:
> 
>  {0}core
>  {1}cosine
>  {2}nis
>  {3}inetorgperson
>  {4}samba
>  {5}apple

The account objectClass is in the cosine schema.

> 
> 
> Thanks for any help
> 
> mi
> 
> PS: I just need a "mail" attribute. Maybe there is a simpler way than
to add inetOrgPerson with all it's ridiculous attributes like "audio" or
"carLicense" ?





This message is confidential to Prodea Systems, Inc unless otherwise indicated 
or apparent from its nature. This message is directed to the intended recipient 
only, who may be readily determined by the sender of this message and its 
contents. If the reader of this message is not the intended recipient, or an 
employee or agent responsible for delivering this message to the intended 
recipient:(a)any dissemination or copying of this message is strictly 
prohibited; and(b)immediately notify the sender by return message and destroy 
any copies of this message in any form(electronic, paper or otherwise) that you 
have.The delivery of this message and its information is neither intended to be 
nor constitutes a disclosure or waiver of any trade secrets, intellectual 
property, attorney work product, or attorney-client communications. The 
authority of the individual sending this message to legally bind Prodea Systems  
is neither apparent nor implied,and must be independently verified.