--On Wednesday, March 28, 2018 1:14 AM +0100 Howard Chu hyc@symas.com wrote:

That's because memberOf is an operational attribute, so objectclass requirements don't apply. If you want to use some other attribute, make sure the schema allows it in the relevant entries, or use an operational attribute.

Not a bug. Closing this ITS.

For historical purposes, it is a bit more complex than this.

It is not possible to include an operational attribute via the normal schema methods. This depends on the "dsaschema" contrib overlay. That contrib overlay requires development to support cn=config.

The alternative to using an operational attribute is to have a custom objectClass where the custom attribute desired is defined as an optional ("MAY") attribute.

--Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com