joshua@itsecureadmin.com wrote:

...

When adding an object with slapadd or ldapadd, it is possible to create an object which does not have an RDN, and therefore not searchable by RDN.

Can't reproduce. Works as expected here (adding entry without naming attributes/distinguished values results in automatically generating that data, both by slapadd and ldapadd). Can you confirm software versions?

To confirm versions:

[root@server01 ldifs]# ldapadd -V ldapadd: @(#) $OpenLDAP: ldapmodify 2.4.10 (Jun 12 2008 11:02:00) $ joshm@server03.sky.dom:/home/SKY/joshm/redhat/BUILD/openldap-2.4.10/clients/tools (LDAP library: OpenLDAP 20410) ldap_sasl_interactive_bind_s: Confidentiality required (13) [root@server01 ldifs]# slapd -V @(#) $OpenLDAP: slapd 2.4.10 (Jun 12 2008 11:03:43) $ joshm@server03.sky.dom:/home/SKY/joshm/redhat/BUILD/openldap-2.4.10/servers/slapd

I'm running on CentOS 5.1 with DB 4.6 -- I built these RPMs.

Thanks,