Re: ldap_add: Object class violation (65), additional info: attribute 'h

Re: ldap_add: Object class violation (65), additional info: attribute 'host' not allowed

To: wforumw@gmail.com

Subject: Re: ldap_add: Object class violation (65), additional info: attribute 'host' not allowed

From: Vikas Parashar <para.vikas@gmail.com>

Date: Fri, 24 Jan 2014 22:44:30 +0530

Cc: Joshua Schaeffer <jschaeffer0922@gmail.com>, openldap-technical@openldap.org

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=1h1LnMK41daS6dawAQakoJeUkNl22bCg0V0no18xO/k=; b=E+sKdqWcFtxaPVQuPN1zUclKuxCo8EYht0u6l9miX/bv4n6SnVqRVVNRMRKvQPyDof 0fs4mScyZuG+y21crxkU3T3uwzT6Y3vIvo48fx5JokKr9P8qQyN5KZ782kNIw7Siq8Q6 kE2V3h29KiQIQk6FHXXOzXl+aTcLUrtSk4Pe7AzJqgO3h4ZoIUbSpUNlwKfeWZWHoucP LpYKCrG5b1K23r77XHSmPyx2ouHCgxcR+EVWqLOUbpqZTp0p3+wi53M+aZyz/eu7CHRY HL3kCfNv5S443GVDMFBcVHy7Gq0y0DYHDgtZ35+aZCdJ2mewcuxTqSGjtfjGoLOJHkDz 3orA==

In-reply-to: <52E272D8.9040901@gmail.com>

References: <52DD49EE.4030107@gmail.com> <CAFNRWC58+KZJanzQK0Fa-VSX_3r7w_crFuz3w92HJWd0Y=0n3Q@mail.gmail.com> <52E272D8.9040901@gmail.com>

Hi,

You can only use one structural class(belong with same family) at a time.

What you can do now, you can create a new auxiliary class withsame attributes.

On Fri, Jan 24, 2014 at 7:34 PM, W Forum W <wforumw@gmail.com> wrote:

Hi, Thanks for the quick response
I am using Debian wheezy.
I installed the ldapns.schema from the deb package but I still when I try to add a user (as a ldif file with a host attribute defined) a get the error

ldap_add: Object class violation (65)
additional info: attribute 'host' not allowed
If I remove the host attribute (from ldif file) the user is added successfully.
How can I get the host attribute working?
Many thanks

On 01/20/2014 05:43 PM, Joshua Schaeffer wrote:

There is some information from the Debian wiki (https://wiki.debian.org/LDAP/PAM) on adding a host attribute to a user, but I'm sure it applies to other distro's as well:

To add the "host" attribute to a user, he should have an objectClass that supports this. The "account" objectClass has the attribute, but is not compatible with the "inetOrgPerson" objectClass. To work around this, you can use the "ldapns" schema, supplied with the libpam-ldap package. This schema provides the "hostObject" objectClass, which has the proper "host" attribute.

On Mon, Jan 20, 2014 at 9:08 AM, W Forum W <wforumw@gmail.com> wrote:

Hi
I try to add a user but the host attribute is not accept (everything else is fine)

ldapadd -x -W -D "cn=admin,dc=example,dc=com" -f user.ldif
Enter LDAP Password:
adding new entry "uid=user,ou=Users,dc=example,dc=comt"
ldap_add: Object class violation (65)
additional info: attribute 'host' not allowed

how can i add a host attribute
i have following schema installed

core.schema
cosine.schema
nis.schema
inetorgperson.schema
samba.schema

thanks in advance