Darin Perusich | 3 Mar 2011 20:38
Favicon

Re: posixGroup, groupOfUniqueNames and OpenDJ

Hi Roland,

> 
> please edit your LAM server profile. In the modules selection for
> groups
> please remove the posixGroup module and add
> groupOfUniqueNames+rfc2307bisPosixGroup.
> I guess you are using Suse Linux which uses a special posixGroup
object
> class.

While my clients are OpenSUSE I am using the OpenDJ LDAP server,
http://www.forgerock.com/opendj.html. It's the continuation of OpenDS
after Oracle affectively killed the project by abandoning it.

I've set "types: modules_group: groupOfUniqueNames,rfc2307bisPosixGroup"
in my server profile but when I attempt to create a posixGroup I'm
getting a message that I need to add at least one member to the group.
Technically this is not required by the schema, see the objectClass
definition below. The OpenLDAP schema is based on RFC2256 where a
uniqueMember is required. 

Is this hardcoded into LAM or is it determining referencing the schema
from the server?

objectClasses: ( 2.5.6.17 NAME 'groupOfUniqueNames' SUP top STRUCTURAL
  MUST cn MAY ( uniqueMember $ businessCategory $ seeAlso $ owner $ ou $
o $
  description ) X-ORIGIN 'RFC 4519' )
The information transmitted is intended only for the person or entity to which
(Continue reading)

Roland Gruber | 5 Mar 2011 12:56
Picon
Favicon

Re: posixGroup, groupOfUniqueNames and OpenDJ


Hi Darin,

Am 03.03.2011 20:38, schrieb Darin Perusich:
> I've set "types: modules_group: groupOfUniqueNames,rfc2307bisPosixGroup"
> in my server profile but when I attempt to create a posixGroup I'm
> getting a message that I need to add at least one member to the group.
> Technically this is not required by the schema, see the objectClass
> definition below. The OpenLDAP schema is based on RFC2256 where a
> uniqueMember is required. 
> 
> Is this hardcoded into LAM or is it determining referencing the schema
> from the server?

this is hardcoded. I will provide a configuration option for 3.4.0.

> objectClasses: ( 2.5.6.17 NAME 'groupOfUniqueNames' SUP top STRUCTURAL
>   MUST cn MAY ( uniqueMember $ businessCategory $ seeAlso $ owner $ ou $
> o $
>   description ) X-ORIGIN 'RFC 4519' )

Life could be so easy if everybody stuck to the same standards. :)

--

-- 

Best regards

Roland Gruber

LDAP Account Manager
(Continue reading)


Gmane