structural objectclass checking

To: <openldap-technical@openldap.org>

Subject: structural objectclass checking

From: <Markus.Storm@t-systems.com>

Date: Wed, 8 Jan 2020 15:25:14 +0000

Accept-language: de-DE, en-US

Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t-systems.com; dmarc=pass action=none header.from=t-systems.com; dkim=pass header.d=t-systems.com; arc=none

Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uBZCuIAdrk85Y4jvpN0wK2/TVsl9VxkhcCLxm0sJVnU=; b=Js/AR2RRe290MdWPFDLEbwS336ujYHDs142SPMIq3W/tfolCOsqv6pNEVgel+9rvnsf4UoFoIhn1E+nR/Ze6egG89pyhNtsS/2z2sCuRDRZLO13yfywW7BoVWw8Dwh50oGsE5ha9Zoxcyxb3B5dfUcO+QlMzULxGMAHhw4Wxhm6SYik1AAKapTw0g5/NjYEURJIu1YLHPgT5vZ4vY3VAdWgCeBubTwyF+Fm3TLlbbRImQh4VdN9vWLZYudStmlCOrNI9uXj3oEN+4uHgtk66GSPA0zKifMtghFcs2o8WcYJRd77hUhNPGa4HNfHPDVvx6dQUCerul/bKcbOJYr6nXQ==

Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=bBPyjYupaShloG/8dyLRtAun40HXq8FztF3vt9kFe29TeeEsMOkJAp1aHt3kPkROsqxSkqA4EHtTLoFJuuA1tbq4m8a+P4hXN6bbLVCHXcrj32nYHMdh8oIyFgCXiI5d6XSMb2+2G04qbCm9LqmUZFg2R63AfKwcT7liKNb+FeKn4mZjl5ZGz1vOFXDeZBsCPJap99qWN9DO5HhHUYvz7hcope1SSOIQ4Lqpdv9vGv3c1lyBZcIbsHbTEiNSdX/RDy1U9HN5ulZ52fsPp1m2PBH9CraSmzQ8QrqBh31HULd1LOLs0eOq6jw1J1IQ9QLzmkBRJAtHeNRrEkV21jZ2Dg==

Authentication-results: spf=none (sender IP is ) smtp.mailfrom=Markus.Storm@t-systems.com;

Content-language: de-DE

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t-systems.com; i=@t-systems.com; q=dns/txt; s=mail; t=1578496327; x=1610032327; h=from:to:subject:date:message-id:mime-version; bh=uBZCuIAdrk85Y4jvpN0wK2/TVsl9VxkhcCLxm0sJVnU=; b=gkL9yHvYBCKl++iBi+/IoGn1g7AyCse1p/olo+IJEzmluXOa9DWx884U hOOtzyw8vCJO0Th4PlRY4TGmP4HAZYePXRRY909Nm52YjybrvLaXS7Ie/ RmZC/RcQcMLGgxVvYkFJNupv9frqvIglEMDKPPrIXiin+/HdPdhJlTrTB 54KIHLuUga9LScV+NIIY5M9t9/KGQJM3+o0y9JXs4z80OPrVpcbP3O6SR 45LAV3/ThZ+hALRJp4Zm6Czfq0E1MHUSHPzvPAuzXfgZro5v5oeXZN54w /YWTHlsoZacQ8a+pCQuXIh/BStaAyzkaT9Znfhb5GVBuZMU3Bsk27srPo Q==;

Ironport-sdr: xvrxNwFSMiO2820NB8sdVBoLSgeDdMWEPQCekPsZOxziqWBWpSDuLFH7g0bHhiSiqMs6sz2Vm+ nwondgZe2pKg==

Ironport-sdr: 72tgoTXTEDqt56RqVuJglWmUnnB0+WMEKh5PWtAGX70hcsl9zJgUE55pvIZ8gHbzKM+mAjor8n e9kZdMSvUVedCw1Wq2oJautkYQlcZ52EU=

Thread-index: AdXGNU8z0aQAoYK5RtWOCqVNm+W4Aw==

Thread-topic: structural objectclass checking

Hi,

is there a way to disable OpenLDAP checking entries for existence of STRUCTURAL objectclasses?

I know it’s illegal per standard to have either no or multiple objectclasses of STRUCTURAL type on an entry.

Unfortunately in the enterprise world it is very common that you have to deal with existing data which is even beyond your control. Our LDAP is full of such ‘bad’ records, making imports into OpenLDAP fail for 50% of our entries.

I’m trying to present OpenLDAP as an alternative to the commercial LDAP software my company is currently running but I need to come up with a solution to this in order to convince our managers and engineering.

Competition such as Oracle Unified Dir have an option to selectively disable this type of checking.

Is there a way to do it in OpenLDAP via config? If no, would it be rather easy or hard to add that to the code myself ? I once made a similar patch but it had to be applied in a single location within the source only.

Thanks

Best regards
Markus

Follow-Ups:

Re: structural objectclass checking
- From: Quanah Gibson-Mount <quanah@symas.com>
RE: structural objectclass checking
- From: "Vandenburgh, Steve Y" <Steve.Vandenburgh@centurylink.com>