On 02/03/2011 06:24 PM, Howard Chu wrote:
Looks like a bug, the filter check is only implemented for Add operations, not for Modify or ModDN.
In the meantime, as a workaround you should simply use a more fully qualified URI. Restrict the URI to the ou containing your posixGroup entries. Since user names and group names are separate name spaces in POSIX, you cannot store them both in the same branches of a DIT anyway.
The workaround works, thanks for the quick response! There will be other uniqueness scenarios where it will be good to have the full functionality, but for this situation we should be fine.
Regards,
-Kartik