Re: Linux Authentication

[ldap@mm.st]

On Fri, Feb 10, 2012, at 03:18 PM, Andy Carlson wrote:

I am getting the following error when I attempt to add the account objectclass to an existing LDAP account:

 

invalid structural object class chain (inetOrgPerson/account)

 

I read an explanation of which the cliffnote version was “an person is a person, not an account, so the two objectclasses can’t be on the same entry”.

 

While that logic makes sense, I have many accounts on a Sun Directory instance that have both objectclasses.  I am trying to migrate entries from Sun to an existing OpenLDAP instance, but because of this error I am unable to implement this objectclass.  Ultimately, the functionality I am trying to implement is Linux Authentication.  I have successfully added posixAccount and shadowAccount objectclasses, but am unable to add account.

 

Any thoughts?  Thanks much!!!,

 

Andy Carlson

Moody Bible Institute

Identity Administrator | Information Systems
312-329-4385

www.moody.edu

 

I had a similar situation when I tried to upgrade a very old ldap installation that did not enforce strict schema checking.  It used the account objectclass with another structural objectclass.  I used some sed scripts to modify the the ldif by replacing the account objectclass with hostobject since I needed the host attribute.  There were some other violations that need to be worked through, but eventually got it sorted out.