Re: translucent overlay add an attribute to all users in a OU and subtree

[Nicolas RENAULT <nicolas_renault@yahoo.fr>]

Le 14/10/2014 17:17, Dieter Klünter a écrit :
> Am Tue, 14 Oct 2014 14:38:13 +0200
> schrieb Nicolas RENAULT <nicolas_renault@yahoo.fr>:
>
> > Le 07/08/2014 09:09, Dieter Klünter a écrit :
> > > Am Wed, 06 Aug 2014 18:16:07 +0200
> > > schrieb Nicolas RENAULT <nicolas_renault@yahoo.fr>:
> > >
> > > > Le 06/08/2014 03:12, Howard Chu a écrit :
> > > > > Nicolas RENAULT wrote:
> > > > > > how can I add attributes to the translucent instance to all users
> > > > > > in an OU (and sub) ?
> > > > > See slapo-collect.
> > > > > > is there another way to do what I want to do ?
> > > > > >
> > > > > > thanks all for responses
> > > > thanks I think that this is what I want,
> > > >
> > > >     but I cannot find any exemple of the use for this overlay on
> > > > google or other site, And the man slapo-collect, is not clear for
> > > > me.
> > > >
> > > > info : openldap 2.4.39 ,   as exemple, I want to add attribute
> > > > 'networkAddress' and 'homeDrive' for all the inetOrgPerson from my
> > > > Edir :   ou=EDIR,OU=TOUT,dc=exemple,dc=fr
> > > >
> > > > so questions :
> > > >
> > > > * in slapd.conf (I use it because of meta ) :  I have to add these
> > > > lines ?
> > > >
> > > > moduleload    collect
> > > >
> > > > ...
> > > >
> > > > overlay collect
> > > > collectinfo cn=ancestor,ou=EDIR,OU=TOUT,dc=exemple,dc=fr
> > > > networkAdress,homeDrive
> > > >
> > > > (I choose ancestor for cn cause they talk about ancestor in the man
> > > > command)
> > > >
> > > > * don't understand how to create the ancestor ? just as an
> > > > inetOrgPerson with the 2 attributes ?
> > > >
> > > > * as 'homeDrive' or 'networkAddress' are not on inetOrgPerson
> > > > schema (MAY or MUST) it will be a problem no ?
> > > >
> > > > Thanks for reply or link to exemple.
> > Thanks for informations !
> > back to work and to this old question.
> >
> > > according to my private documentation, slapd has to be build with
> > > -DLDAP_COLLECTIVE_ATTRIBUTES, this information might be outdated.
> >
> > how can i know if the openldap 2.4.39 that i use is build with
> > support for the collective attribute ?
> in order to check statically included modules and databases:
> ./slapd -VVV
>
> -Dieter
ok,
the result of the command :
-------------------------------------------
@(#) $OpenLDAP: slapd 2.4.39 $
    opensuse-buildservice@opensuse.org

Included static overlays:
    ppolicy
    syncprov
Included static backends:
    config
    ldif
    monitor
    bdb
    hdb
    ldap
    mdb
    relay
--------------------------------------------

so no static overlay collect but I use a lot a overlay in my conf with 
moduleload directive :

(from my slapd.conf)

--------------------
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/openldap.schema
include         /etc/openldap/schema/dyngroup.schema
include         /etc/openldap/schema/collective.schema
include         /etc/openldap/schema/contrib/exemple.schema
defaultsearchbase dc=example,dc=fr
pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args
loglevel        256
modulepath      /usr/lib/openldap/modules/
moduleload      back_ldap
moduleload      back_meta
moduleload      rwm
moduleload      valsort
#moduleload     accesslog
moduleload      memberof
moduleload      dynlist
moduleload      sssvlv
#moduleload     pcache
moduleload      collect
overlay sssvlv
....
overlay collect
collectinfo cn=collect_OU_NAME,dc=example,dc=fr    co,PostalCode
....
--------------------------------------------

someone see something wrong ?

if all is good with this declaration of collect, do I have to add an 
objectclass "collectiveAttributeSubentry"  somewhere in the schema or it 
is provided by the module ?

--
Nicolas