Re: Oracle OpenLDAP PPolicy ppolicy and the hierarchy

[Dieter KlÃnter <dieter@dkluenter.de>]

Am Mon, 23 Dec 2013 18:16:29 +0000
schrieb David Barr <David.Barr2@mclaneat.com>:

[...]

> dn: cn=Directory Administrators,dc=bozo_company,dc=com
> objectClass: top
> objectClass: groupOfUniqueNames
> cn: Directory Administrators
> uniqueMember: cn=clownadmin,ou=Special Users,dc=bozo_company,dc=com
> uniqueMember: cn=david.barr,ou=People,dc=bozo_company,dc=com
[...]

consider this as my private and personal crusade :-)
You use attribute type uniqueMember without any additional UID in order
to enforce uniqueness. The syntax of uniqueMember attribute type is
Name and optional UID. But without any additional UID any sort of
uniqueness cannot be provided. Just use member attribute type for group
membership, unless you want to enforce a proper uniqueness.

-Dieter

-- 
Dieter KlÃnter | Systemberatung
http://dkluenter.de
GPG Key ID:DA147B05
53Â37'09,95"N
10Â08'02,42"E