ando@sys-net.it wrote:

The problem is that OpenLDAP 2.4 allows to add entries that contain ABSTRACT objectClasses, as soon as no non-ABSTRACT class is subtyped from them, which is clearly an error.

It all reduces to a missing negation in the ABSTRACT subclassing check, resulting in reversing the logic of the test.

Please test servers/slapd/schema_check.c 1.112 -> 1.113

I also note that 2.3 suffers from the reverse of the reported issue, namely an abstract class is tolerated, even if no other class inherits from it.

p.

Ing. Pierangelo Masarati OpenLDAP Core Team

SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati@sys-net.it ---------------------------------------